检索结果-内蒙古大学图书馆

Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education

作者： Richard Weiss Ambareen Siraj Jens Mache Elizabeth Hawthorne Blair Taylor Siddharth Kaza Michael E. Locasto The Evergreen State College Olympia WA USA Tennessee Tech University Cookeville TN USA Lewis and Clark College Portland OR USA Union County College Cranford NJ USA Towson University Towson MD USA SRI International New York NY USA

ISBN: (纸本)9781450346986

We have been teaching cybersecurity using hands-on, interactive exercises that have successfully engaged students. However, in order to meet the increasing demand for security professionals, we need to greatly expand the community of faculty teaching in this area. We would like to bring together new and experienced faculty to do this. Ambareen Siraj has set up a dedicated Facebook group to allow us to work together outside of SIGCSE events, but we need to develop a critical mass of users. During the BoF, we will encourage participants to sign up for the closed group, and we will have an exercise where they ask and answer questions about what they want from this learning community. One benefit of having a learning community is that it will be easier to provide support for new members to learn about resources and get help. These resources include exercises, webinars, and slides. We will share experiences, practices and ongoing efforts, including our own (e.g. Security Injections, the Security Knitting Kit project, and EDURange). The BoF also benefits experienced members, helping them to reach other faculty with similar interests. As a community we have begun to share exercises and discuss what works and what problems students and instructors have encountered. For the last five years, we have been doing that at SIGCSE. We will discuss ways to integrate security-related exercises into existing courses. The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for from the community?"

关键词： security laboratory exercises hacker curriculum secure coding cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Hands-on Cybersecurity Exercises That are Easy to Access and Assess (Abstract Only) 17

Hands-on Cybersecurity Exercises That are Easy to Access and...

引用

Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education

作者： Richard Weiss Jens Mache Michael E. Locasto Frankly Turbak The Evergreen State College Olympia WA USA Lewis and Clark College Portland OR USA SRI International New York NY USA Wellesley College Wellesley MA USA

ISBN: (纸本)9781450346986

Cybersecurity is a topic of growing interest for CS educators. The goal of this workshop is to empower faculty to add hands-on security exercises to their courses. We introduce EDURange, a framework for accessing, developing and assessing interactive cybersecurity exercises. We want to reach and engage all students. The first step is to have interesting challenges that are easy to access. EDURange uses VMs in a public cloud, which also provides flexible resources. No software needs to be installed - students only need an ssh client. Another step is to give students feedback on how they are doing. This is an important role for faculty and is not something to automate. Instead, EDURange provides basic tools to visualize what students are doing as they work on the exercises. This allows instructors to more easily see when students are stuck or heading in the wrong direction. Since cybersecurity exercises are often easy to understand but hard to solve, guidance is especially important so that students don't become frustrated. In this workshop, participants will get to try EDURange and several exercises, including an introduction to ssh. Participants don't need to be security experts. We will provide sample syllabuses for an introductory security course as well as an interdisciplinary security course, and we will show how our exercises can be integrated into these courses. More information at http://***. Laptop required.

关键词： hacker curriculum cybersecurity laboratory exercises secure coding security

来源：评论

学校读者我要写书评

暂无评论

Mining Cryptography Misuse in Online Forums 2

Mining Cryptography Misuse in Online Forums

引用

IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C)

作者： Braga, Alexandre Dahab, Ricardo State Univ Campinas UNICAMP Inst Comp Campinas SP Brazil

ISBN: (纸本)9781509037131

This work analyzes cryptography misuse by software developers, from their contributions to online forums on cryptography-based security and cryptographic programming. We studied three popular forums: Oracle Java Cryptography, Google Android Developers, and Google Android Security Discussions. We applied a data mining technique, namely Apriori, to elicit association rules among cryptographic bad practices, platform-specific issues, cryptographic programming tasks, and cryptography-related use cases. We found that, with surprisingly high probabilities (90% for Java and 71% for Android), several types of cryptography misuse can be found in the posts, but unfortunately masked by technology-specific issues and programming concerns. We also found that cryptographic bad practices frequently occur in pairs or triples. We related triple associations to use cases and tasks, characterizing worst case scenarios of cryptography misuse. Finally, we observed that hard-to-use architectures confuse developers and contribute to perpetuate recurring errors in cryptographic programming.

关键词： cryptography misuse Apriori algorithm data mining Java cryptographic architecture secure coding

来源：评论

学校读者我要写书评

暂无评论

Teaching safe coding via comparative languages

Journal of Computing Sciences in Colleges

引用

Journal of Computing Sciences in Colleges 2017年第4期32卷

作者： David A. Cook Anne Marie Eubanks Stephen F. Austin State University

We recently taught a Special Projects course aimed at introducing students into writing safe code - code that would be robust and reliable in embedded or real-time applications. This paper is a synopsis of the experie... 详细信息

关键词： ada embedded coding exception handling real-time and parallel processing safe coding secure coding

来源：评论

学校读者我要写书评

暂无评论

OPTIMAL COMMUNICATION OF REAL TIME DATA ON secure CDMA IP RAN NETWORK

OPTIMAL COMMUNICATION OF REAL TIME DATA ON SECURE CDMA IP RA...

引用

International Conference on Signal Processing, Communication, Power and Embedded System

作者： E. Venkat Reddy K. Srinivasa Rao ECE BIET R.R Dist Hyderabad Telangana-India ECE DRK Institute of Science & Technology R.R Dist Hyderabad Telangana-India

ISBN: (纸本)9781509046218

This paper presents an optimal and secure communication of real time data over a CDMA based IP RAN network. In the process of data transmission, a new coding approach for security enhancement and quality improvement based on spectrum utilization and antenna coding is suggested. The traffic model is developed for image and audio data transmission over a wireless channel, having an interference of AWGN noise with fading effects. An optimal spectrum sensing approach for proper resource allocation is developed, and communicated using the secure WeP protocol. This approach is evaluated for different communication parameters and these are compared with those obtained using conventional modeling of CDMA system. The results obtained using the developed model shows an improvement in the quality of audio and video signals compared to conventional modeling.

关键词： Optimal Communication Image and audio data secure coding CDMA system channel coding

来源：评论

学校读者我要写书评

暂无评论

Assessment of Security Knowledge, Skills and Abilities using Hands-On Exercises in 2016 (Abstract Only) 16

Assessment of Security Knowledge, Skills and Abilities using...

引用

Proceedings of the 47th ACM Technical Symposium on Computing Science Education

作者： Richard Weiss MIchael E. Locasto Jens Mache Blair Taylor Elizabeth Hawthorne Siddharth Kaza Ambareen Siraj The Evergreen State College Olympia WA USA University of Calgary Calgary AB Canada Lewis and Clark College Portland OR USA Towson University Towson MD USA Union County College Cranford NJ USA Tennessee Tach University Cookeville TN USA

ISBN: (纸本)9781450336857

We see teaching cybersecurity through hands-on, interactive exercises as a way to engage students. However, we also want to assess how much students are learning from these exercises, and the exercises themselves could be used to assess what students know. Creating new hands-on exercises requires significant preparation on the part of the instructor. As a community we have begun to share exercises and discuss what works and what problems students and instructors have encountered. The purpose of this BOF is two-fold: 1) to continue to bring together instructors who have developed hands-on exercises with those who would like to use them, and 2) extend the discussion to include assessment of student learning. We recognize that few CS programs can afford new required courses, so we will discuss ways to integrate security-related exercises into existing ones. This could include networking, OS, computer architecture, programming languages, software engineering, algorithms and programming (CS0, CS1, CS2). The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for? What are the learning goals for your students? How do you assess them?"Recent hiring forecasts indicate that there is still a tremendous need for skilled information security experts. Security is one of the core areas in the ACM/IEEE COMPUTER SCIENCE 2013 Curricula. It is particularly important to share stories from the classroom (what worked and what didn't), discuss ethical hacking, discuss how to teach and evaluate analytical skills, and discuss how we know if we are making a difference. We plan to share experiences, practices and ongoing efforts, including our own (e.g., our teaching experiences, Security Injections, the Security Knitting Kit project, The EDURange project and our dissemination of other infosec interactive exercises such as SEED labs). Both Security Injections and EDURange have features that address assessment.

关键词： security education assessment hacker curriculum security cybersecurity secure coding

来源：评论

学校读者我要写书评

暂无评论

Security Assessment by Google Hacking Automation Tools for the Web Sites of Korea and the USA Universities

引用

INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS 2015年第5期9卷 163-173页

作者： Bae, Mi Young Lim, Hankyu Andong Natl Univ Dept Multimedia Engn Andong South Korea

As software exchanges data in the internet environment, it is always susceptible to the malicious attacks of hackers. Google Search enables individuals to randomly search servers with their preferred vulnerabilities using several search words. Using a sample of university homepages in Korea and the US, this paper investigates the security weakness of homepages by using SiteDigger that automatically searches the Googling, which is the most convenient way of collecting data, and examines the security weakness of homepages in Korea and the US. Based on the analyzed weakness, the researcher attempts to conduct future study that develops security diagnosis tool for webpage

关键词： secure coding Hacking tools University Website Personal information

来源：评论

学校读者我要写书评

暂无评论

Game Programmers with secure coding

Game Programmers with Secure Coding

引用

3rd Annual International Conference on Computer Games Multimedia and Allied Technologies (CGAT)

作者： Nagmoti, Rinkesh Chung, Sam Endicott-Popovsky, Barbara Univ WA Tacoma Comp & Software Syst Inst Technol Tacoma WA 98402 USA Univ WA Tacoma Informat Technol & Syst Inst Technol Tacoma WA USA Univ WA Seattle Ctr Informat Assurance & Cybersecur Seattle WA USA

ISBN: (纸本)9789810854805

The purpose of this paper is to introduce software security for online games at two levels: first at the programming level and second at the web service level. Increasingly game developers are providing their games online, employing web services;however, security threats evolve with the use of web services in such applications which is a great challenge for game developers. The roadblock to providing secure game applications is the lack of understanding of secure coding concepts by game programmers. In this paper we propose the 5W1H re-documentation technique and the use of the Scrum agile software development methodology in a reengineering process to educate game programmers concerning secure coding concepts. The authors first prove how insecure coding can affect the gaming industry by introducing an example of an insecure game login application. Then the same login application is re-documented and reengineered with secure coding concepts. The reengineered application is then tested for security threats.

关键词： secure coding Web Services 5W1H Software Reengineering Software Re-documnetation Service-Oriented Computing Agile Software Development Methodology Scrum

来源：评论

学校读者我要写书评

暂无评论

Teaching Security Using Hands-on Exercises in 2015 (Abstract Only) 15

Teaching Security Using Hands-on Exercises in 2015 (Abstract...

引用

Proceedings of the 46th ACM Technical Symposium on Computer Science Education

作者： Richard Weiss Michael Locasto Jens Mache Blair Taylor Elizabeth Hawthorne Justin Cappos Ambereen Siraj The Evergreen State College Olympia WA USA The University of Calgary Calgary AB Canada Lewis & Clark College Portland OR USA Towson University Towson MD USA Union County College Cranford NJ USA New York University New York NY USA Tennessee Technical University Cookeville TN USA

ISBN: (纸本)9781450329668

We see teaching cybersecurity through hands-on, interactive exercises as a way to engage students. Some of the exercises that we have seen require significant preparation on the part of the instructor. Having a community makes it easier to share exercises, knowing what works and what problems students and instructors have encountered. The purpose of this BOF is to bring together instructors who have developed hands-on exercises, those who have used them and those who would like to. We recognize that few CS programs can afford new required courses, so we will discuss ways to integrate security-related exercises into existing ones. This could include networking, OS, computer architecture, programming languages, software engineering, algorithms and programming. The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for?"Recent hiring forecasts indicate that there is still a tremendous need for skilled information security experts. Security is one of the core areas in the ACM/IEEE COMPUTER SCIENCE 2013 Curricula. It is particularly important to share stories from the classroom (what worked and what didn't), discuss ethical hacking, and discuss how to teach analytical skills. We plan to share experiences, practices and ongoing efforts, including our own (e.g., our teaching experiences, the SISMAT program, Security Injections, the Seattle Platform, the Security Knitting Kit project, EDURange and the dissemination of infosec interactive exercises).

关键词： secure coding security hacker curriculum laboratory exercises

来源：评论

学校读者我要写书评

暂无评论

Script-templates for the Content Security Policy

引用

JOURNAL OF INFORMATION SECURITY AND APPLICATIONS 2014年第3期19卷 209-223页

作者： Johns, Martin SAP Res Karlsruhe Germany

Content Security Policies (CSPs) provide powerful means to mitigate most XSS exploits. However, CSP's protection is incomplete. Insecure server-side JavaScript generation and attacker control over script-sources can lead to XSS conditions which cannot be mitigated by CSP. In this paper we propose PreparedJS, an extension to CSP which takes these weaknesses into account. Through the combination of a safe script templating mechanism with a light-weight script checksumming scheme, PreparedJS is able to fill the identified gaps in CSP's protection capabilities. (C) 2014 Elsevier Ltd. All rights reserved.

关键词： Cross-site Scripting XSS Content Security Policy CSP secure coding Web application security

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：