ACTIVE METHODOLOGIES IN CYBERSECURITY EDUCATION: EXPERIENCES WITH DEFENSE AGAINST SIDE-CHANNEL ATTACKS IN EDUCATIONAL ENVIRONMENTS

Abstract

Considering the expansion of embedded systems, the Internet of Things, and critical digital infrastructures, cybersecurity training is becoming increasingly relevant. However, in many technical and higher education courses, information security education still predominantly focuses on theoretical content, with little practical exploration of the physical vulnerabilities present in computing devices. This limitation hinders the understanding of how cryptographic algorithms can present vulnerabilities when implemented in real hardware, especially in side-channel attacks. In this context, this study aims to investigate how the application of active methodologies can contribute to cybersecurity education through practical defense against side-channel attacks in embedded systems. For this purpose, an active methodology based on project-based learning was implemented in two classes in the technological area of ​​Senac Garanhuns, totaling forty-two students. The activities were developed over four months using microcontrollers, prototyping boards, electronic measuring instruments, and firmware development on the STM32CubeIDE platform, allowing students to experimentally explore concepts related to physical security. The results indicated greater student engagement, strengthened analytical thinking, and a better understanding of the relationships between software execution, hardware behavior, and the exposure of sensitive data. Furthermore, the experience demonstrated institutional viability by being registered on the Senac Pernambuco Genesis Platform, highlighting the potential of active methodologies for applied cybersecurity education in embedded systems.