René Walendy

I'm an interdisciplinary researcher at the intersection of hardware security, human-computer interaction, and psychology.

Coming from an engineering background, I have seen time and time again the profound impact of looking beyond your own discipline in building systems that successfully transfer great cyber security research into practice - systems that are secure, usable, and support the people that rely on them in precisely the right places.

I believe in the potential of bringing people from diverse backgrounds together to do open, transparent, and reproducible research - and communicating your research well to other disciplines.

In my Ph.D. project, I collaborate extensively with researchers from cognitive science and psychology to understand how people perform reverse engineering in practice. With this foundational research, my team wants to open new avenues for protecting microelectronics from malicious attacks and for educating the next generation of hardware security talents.

Affiliation:

Max Planck Institute for Security and Privacy

Country:

Germany


Session

03-18
16:40
20min
Training Hardware Hackers: Insights from the Trenches
René Walendy

At a time when securing digital devices is paramount—from consumer electronics to critical infrastructure—the demand for skilled cybersecurity professionals specializing in Hardware Reverse Engineering (HRE) is skyrocketing. Recognizing this need, the U.S. and EU have committed significant funding to build a cybersecurity-ready semiconductor workforce. But how well are our educational programs meeting this demand? And what can we, as a community, do to support the next generation of HRE professionals?

To dive deep into the state of HRE training, we conducted a survey at two leading events in the field: Hardwear.io USA 2023 and the HARRIS 2024 workshop. The survey, capturing the insights of 68 dedicated hardware enthusiasts with diverse expertise, reveals a striking reliance on independent and on-the-job learning over traditional academic routes, underscoring the potential for further development of formal education.
To investigate the root cause of these survey results, we analyzed 13 relevant academic courses in hardware security. We discovered that the typical course structure of lectures and hands-on projects is effective. However, when comparing the content of existing courses to the needs identified in our survey, several important areas and threat models for HRE are underrepresented.

To meet the growing societal and industry demand, we advocate for the integration of HRE training into academic curricula. By fostering more structured, accessible, and standardized training programs, we can better equip future professionals with the critical skills needed to solve real-world security problems early on.
Doing so will require a joint effort between academic educators and the hardware design and security communities, for example, by exploring ways to expose students to real-world industry problems.
Let's work together to build stronger bridges between academia and industry, giving future professionals a head start on a successful career in hardware security.

Session VI - Future Directions in Hardware Reverse Engineering
Lecture Hall