This paper presents SEPP 2.0 (Security Education and Penetration-Testing Platform), the second stage of a practical teaching platform designed to strengthen IoT security education through direct interaction with real devices. Building on the first SEPP version, which was successfully presented and published at IAFOR, SEPP 2.0 extends the concept with a larger set of structured, course-aligned exercises within the IoT Security program at OTH Regensburg. The platform integrates real IoT devices such as smart plugs, light bulbs, smart locks, and a Raspberry Pi into a portable suitcase environment. Each exercise is designed to make typical security weaknesses and attack steps tangible for students. The sequence of tasks reflects realistic phases of a security assessment — from information gathering and configuration review to network and communication analysis. Common tools are applied in a guided and safe context to observe network behavior, detect insecure communication, and understand reproducible attack patterns such as replay or denial-of-service. SEPP 2.0 connects these technical elements with reflective learning on current standards and regulations, including ETSI EN 303 645 and the EU Cyber Resilience Act. This combination helps students not only identify vulnerabilities but also translate them into technical and organizational protection requirements. Beyond its local use at OTH Regensburg, SEPP 2.0 was developed with transferability in mind. Its modular structure and detailed documentation allow other universities to adopt, adapt, and expand the platform to fit their own cybersecurity or engineering curricula, making SEPP 2.0 a sustainable model for practice-oriented security education.

Authors:
Dominic Hauser, Regensburg University of Applied Sciences, Germany
Sebastian Fischer, Regensburg University of Applied Sciences, Germany
Julian Graf, Regensburg University of Applied Sciences, Germany

About the Presenter(s)
Dominic Hauser is a Data Analyst specializing in AI and a Master’s student in Information Systems focusing on Cybersecurity. His interests lie in AI, cybersecurity, and intelligent systems. Currently, he is working on SEPP, a security education platform

Connect on Linkedin
https://www.linkedin.com/in/dominic-hauser

See this presentation on the full schedule – Thursday Schedule

Bookmark