Abstract:

The growing use of Internet of Things (IoT) technologies in healthcare has introduced significant cybersecurity challenges. However, teaching complex security concepts to undergraduate students remains difficult when instruction is primarily theoretical and includes limited lab environments. Therefore, students may graduate with limited exposure to the practical challenges of analyzing and securing IoT-based systems.

This paper addresses these challenges by presenting a case study exploring how a hands-on Internet of Medical Things (IoMT) lab environment can increase student engagement and understanding of cybersecurity principles. The learning environment centers on a prototype patient health monitoring system that simulates a distributed IoMT architecture involving embedded sensing devices, messaging infrastructure, backend services, and a web-based monitoring interface.

This work contributes:
(1) the design and integration of an IoMT monitoring testbed for cybersecurity laboratory instruction,
(2) a structured learning approach that combines system analysis, threat modeling, and security experimentation within healthcare IoT system, and
(3) practical insights for educators seeking to incorporate emerging IoT security challenges into undergraduate cybersecurity curricula.

We implemented an assessment methodology around four key dimensions: cognitive skill development, supporting advanced students’ understanding in analyzing and evaluating structural threats in IoT systems; experiential learning, where students work on threat modeling and device monitoring; reflective practices, to reinforce learning and critical thinking; and iterative feedback and peer collaboration, enabling students to review and refine technical skills. The findings show consistently high student satisfaction, interest, and engagement. Qualitative feedback confirmed that the hands-on, simulation-based labs significantly enhanced students’ practical skills and learning experience with related tools.

Keywords:

Cybersecurity Education, Case Studies, Internet of Things (IoT), Threat Modeling.