The increasing importance of supply chain security for digital devices -- from consumer electronics to critical infrastructure -- has created a high demand for skilled cybersecurity experts. These experts use Hardware Reverse Engineering (HRE) as a crucial technique to ensure trust in digital semiconductors. Recently, the US and EU have provided substantial funding to educate this cybersecurity-ready semiconductor workforce, but success depends on the widespread availability of academic training programs. In this paper, we investigate the current state of education in hardware security and HRE to identify efficient approaches for establishing effective HRE training programs. Through a systematic literature review, we uncover 13 relevant courses, including eight with accompanying academic publications. We identify common topics, threat models, key pedagogical features, and course evaluation methods. We find that most hardware security courses do not prioritize HRE, making HRE training scarce. While the predominant course structure of lectures paired with hands-on projects appears to be largely effective, we observe a lack of standardized evaluation methods and limited reliability of student self-assessment surveys. Our results suggest several possible improvements to HRE education and offer recommendations for developing new training courses. We advocate for the integration of HRE education into curriculum guidelines to meet the growing societal and industry demand for HRE experts.
翻译:随着数字设备(从消费电子产品到关键基础设施)供应链安全的重要性日益凸显,市场对熟练网络安全专家的需求急剧增长。这些专家将硬件逆向工程(HRE)作为一项关键技术,用以确保数字半导体产品的可信性。近期,美国和欧盟已投入大量资金用于培养具备网络安全能力的半导体专业人才,但这一目标的实现有赖于学术培训项目的广泛普及。本文通过调研硬件安全与HRE教育的现状,旨在探索建立高效HRE培训项目的有效途径。通过系统性文献综述,我们梳理出13门相关课程,其中8门配有学术出版物。我们归纳了这些课程共通的专题内容、威胁模型、核心教学特征及课程评估方法。研究发现,多数硬件安全课程并未将HRE作为教学重点,导致HRE培训资源稀缺。虽然当前主流的"理论讲授+实践项目"课程结构总体有效,但我们观察到标准化评估方法的缺失以及学生自我评估调查的可信度局限。研究结果为HRE教育的改进提出了若干可行方向,并为开发新培训课程提供了建议。我们主张将HRE教育纳入课程指导纲要,以满足社会与行业对HRE专家日益增长的需求。