检索结果-内蒙古大学图书馆

49th ACM SIGCSE Technical Symposium on Computer Science Education (SIGCSE)

作者： Kozo, Siddharth Taylor, Blair Towson Univ Towson MD USA

ISBN: (纸本)9781450351034

The ACM CS 2013 curriculum includes Information Assurance and Security as a pervasive knowledge area, the ACM Community College curricular guidelines, CSTransfer2017, places great emphasis on cybersecurity as well. However, introducing security in introductory programming courses is challenging because of lack of appropriate teaching resources and training. This workshop will provide a well-tested strategy for introducing secure coding concepts in CS0, CS1, CS2, and AP CS A classes. We will introduce attendees to secure coding through hands-on exercises, and provide self-contained, lab-based modules designed to be injected into CS0-CS2 with minimal impact on the course (***/securityinjections). Participants will be encouraged to bring in their own syllabus and labs to modify to include learning objectives focused on cybersecurity based on ACM and CAE guidelines. Laptop recommended.

关键词： Security Injections Cybersecurity CS1 High School secure coding

来源：评论

学校读者我要写书评

暂无评论

Security Injections@Towson: Integrating secure coding into Introductory Computer Science Courses

引用

ACM TRANSACTIONS ON COMPUTING EDUCATION 2016年第4期16卷 16-16页

作者： Taylor, Blair Kaza, Siddharth Towson Univ Towson MD USA Dept Comp & Informat Sci 7800 York Rd Towson MD 21252 USA

Despite the critical societal importance of computer security, security is not well integrated into the undergraduate computing curriculum. Security classes and tracks treat security issues as separable topics as opposed to fundamental issues that pervade all aspects of software development. Recently, there has been an increasing focus on security as a cross-cutting concern across the computer science curriculum. The Security Injections@Towson project provides resources and effective strategies to incorporate secure coding in the early programming classes. We describe the development, assessment, and dissemination of more than 40 lab-based security injection modules designed to be injected into courses with minimal impact on the curriculum. We include assessment results from 1,135 students across five diverse institutions demonstrating that the security injections help students retain, comprehend, and apply secure coding concepts in the introductory programming courses.

关键词： Security Security injections secure coding CS0 CS1 CS2 security integration

来源：评论

学校读者我要写书评

暂无评论

Discussion on the Reform of secure coding

引用

计算机教育 2022年第12期 43-48页

作者： Yi Ma Dongming Chen Dongqi Wang software college Northeastern UniversityShenyang110006China

secure coding is an indispensable part of the undergraduate training program for Information Security *** a basic course for undergraduates to carry out project engineering,its importance is *** the actual teaching activities,the program design courses have to be solved in terms of content update,practical ability improvement and scientific research project,so the curriculum reform is *** paper analyses the main problems existing in the secure coding course,explores the solution,proposes teaching methods,and gives the evaluation *** practice shows that the reform exploration can obtain good teaching results.

关键词： secure coding Case-based teaching method Modern teaching methods Evaluation methods

来源：评论

学校读者我要写书评

暂无评论

Introducing secure coding in CS0, CS1, and CS2. (Abstract Only) 15

Introducing Secure Coding in CS0, CS1, and CS2. (Abstract On...

引用

Proceedings of the 46th ACM Technical Symposium on Computer Science Education

作者： Siddharth Kaza Blair Taylor Elizabeth K. Hawthorne Towson University Towson MD USA Union County College Cranford NJ USA

ISBN: (纸本)9781450329668

The CS 2013 curriculum includes Information Assurance and Security as a pervasive knowledge area. However, introducing security in lower level courses is challenging because of lack of appropriate teaching resources and training. This workshop will provide a well-tested strategy for introducing secure coding concepts in CS0, CS1, and CS2. We will introduce attendees to secure coding through hands-on exercises, and provide self-contained, lab-based modules designed to be injected into CS0-CS2 with minimal impact on the course (***/securityinjections). Participants will be encouraged to bring in their own syllabus and labs to modify to include secure coding concepts. The first 15 participants will be reimbursed for the workshop cost on attendance. Laptop recommended.

关键词： cs2 security injections cs1 secure coding cs0

来源：评论

学校读者我要写书评

暂无评论

Introducing secure coding in CS0 and CS1 (abstract only) 13

Introducing secure coding in CS0 and CS1 (abstract only)

引用

Proceeding of the 44th ACM technical symposium on Computer science education

作者： Matt Bishop Blair Taylor Elizabeth K. Hawthorne Diana Burley Siddharth Kaza University of California at Davis Davis California USA Towson University Towson Maryland USA Union County College Cranford New Jersey USA The George Washington University Washington D.C. USA

ISBN: (纸本)9781450318686

The CS 2013 curriculum draft includes Information Assurance and Security as a pervasive knowledge area. However, introducing security in CS0 and CS1 is challenging because of lack of appropriate teaching resources and training. This workshop will provide a well-tested strategy for introducing secure coding concepts in CS0 and CS1. We will introduce attendees to secure coding through hands-on exercises, and provide self-contained, lab-based modules designed to be injected into CS0/CS1 with minimal impact on the course (***/securityinjections). Participants will be encouraged to bring in their own syllabus and labs to modify to include secure coding concepts. The first 15 participants will be reimbursed for the workshop cost on attendance. Laptop recommended.

关键词： secure coding cs1 cs0 security injections

来源：评论

学校读者我要写书评

暂无评论

Introducing secure coding in CS0, CS1, and CS2 (abstract only) 14

Introducing secure coding in CS0, CS1, and CS2 (abstract onl...

引用

Proceedings of the 45th ACM technical symposium on Computer science education

作者： Blair Taylor Siddharth Kaza Elizabeth Hawthorne Towson University Towson MD USA Union County College Cranford NJ USA

ISBN: (纸本)9781450326056

关键词： security injections secure coding CS1 CS2 CS0

来源：评论

学校读者我要写书评

暂无评论

Teaching secure coding: the myths and the realities 13

Teaching secure coding: the myths and the realities

引用

Proceeding of the 44th ACM technical symposium on Computer science education

作者： Blair Taylor Matt Bishop Elizabeth Hawthorne Kara Nance Towson University Towson MD USA University of California at Davis Davis CA USA Union County College Cranford NJ USA University of Alaska Fairbanks Fairbanks AK USA

ISBN: (纸本)9781450318686

Teaching secure coding has never been more important. The CS2013 Ironman draft includes Information Assurance and Security as a new Knowledge Area and recommends that security be cross-cutting across all undergraduate computer science curricula. The Summit on Education in secure Software recommended: 1) increasing the number of faculty who understand the importance of secure programming principles, and will require students to practice them; 2) integrating computer security content into existing technical and non-technical courses; and 3) using innovative teaching methods to strengthen the foundation of computer security knowledge. In this panel, we will speak to these recommendations and the new curricular guidelines and discuss the importance and challenges of teaching secure coding.

关键词： secure coding

来源：评论

学校读者我要写书评

暂无评论

Security Injections 2.0: Using Segmentation, Instant-feedback, and Auto-grading to Enhance secure coding Modules for Lower-level Programming Courses (Abstract Only) 15

Security Injections 2.0: Using Segmentation, Instant-feedbac...

引用

Proceedings of the 46th ACM Technical Symposium on Computer Science Education

作者： Sagar Raina Blair Taylor Siddharth Kaza Towson University Towson MD USA

ISBN: (纸本)9781450329668

Learning interventions based on modules are common in computer science education. Traditional learning modules that present a large amount of content in a linear format can induce cognitive overload in learners. We present theoretical support for increasing the effectiveness of learning modules, describe a system that implements these principles, and discuss the results of a pilot study across two sections of CS0. Using the Security Injections @Towson cybersecurity modules that target key secure coding concepts including integer error, buffer overflow, input validation, for CS0, CS1, and CS2, we enhanced select modules by incorporating the e-learning design principles of segmentation and interactivity. The pilot study compares student engagement and knowledge of software security and secure coding between the current (1.0) modules and the enhanced (2.0) modules. The use of the enhanced 2.0 modules significantly increased both secure coding and software security knowledge. In addition, student engagement increased and feedback from instructors indicates higher student and instructor interest. This project is partially supported by NSF through grant DUE-1241738

关键词： cs2 secure coding cs0 security injections instant-feedback cs1 auto-grading learning sciences interactive learning

来源：评论

学校读者我要写书评

暂无评论

Toward a readiness model for secure software coding

引用

SOFTWARE-PRACTICE & EXPERIENCE 2023年第4期53卷 1013-1035页

作者： Humayun, Mamoona Niazi, Mahmood Jhanjhi, Noor Zaman Mahmood, Sajjad Alshayeb, Mohammad Jouf Univ Coll Comp & Informat Sci Dept Informat Syst Al Jouf Saudi Arabia King Fahd Univ Petr & Minerals Dept Informat & Comp Sci Dhahran Saudi Arabia King Fahd Univ Petr & Minerals Interdisciplinary Res Ctr Intelligent Secure Syst Dhahran Saudi Arabia Taylors Univ Sch Comp Sci & Engn SCE Subang Jaya Selangor Malaysia

The heart of the application's secure operation is its software code. If the code contains flaws, the entire program might be hacked. The issue with software vulnerabilities is that they reveal coding flaws that hackers could exploit. The prevention of cybersecurity issues begins with the program code itself. When writing software code, a software developer must consider expressing the application's architecture and design requirements, keeping the code streamlined and efficient, and ensuring the code is safe. secure code helps save the system from various cyber-attacks by eliminating the weaknesses that many hacks rely on. To assist the software organization in secure Software coding (SSC), this article proposes a readiness model for SSC, namely SSCRM. The proposed model has five levels;SSC challenges and best practices (BP) are mapped at each level. The proposed model will help the organizations better understand SSC challenges and BPs and provide a roadmap for developing secure software code. The proposed model was evaluated using three case studies. The findings demonstrate that the proposed approach helps determine an organization's SSC level.

关键词： secure coding secure SDLC readiness model case study

来源：评论

学校读者我要写书评

暂无评论

Infusing software assurance and secure coding into introductory CS courses (abstract only) 12

Infusing software assurance and secure coding into introduct...

引用

Proceedings of the 43rd ACM technical symposium on Computer Science Education

作者： Elizabeth K. Hawthorne Nancy R. Mead Mark A. Ardis Carol A. Sledge Union County College Cranford NJ USA Carnegie Mellon University Pittsburgh PA USA Stevens Institute of Technology Hoboken NJ USA

ISBN: (纸本)9781450310987

Nearly every facet of modern society depends heavily on highly complex software systems. The business, energy, transportation, education, communication, government, and defense communities rely on software to function, and software is an intrinsic part of our personal lives. Teaching software assurance and secure coding practices are significant challenges currently facing computer science educators. The Strawman version of the CS2013 curricular volume recognizes this vital need and has included a new knowledge area to specifically address software and information assurance in undergraduate computer science education. Also recognizing the importance of the software assurance discipline for protecting national infrastructures and systems, the U.S. Department of Homeland Security (DHS) has identified the growing need for skilled practitioners in this area. At the direction of the DHS, the Software Engineering Institute at Carnegie Mellon University initiated the Software Assurance Curriculum Project. Session leaders will share curricular materials from this project and will facilitate active discussion centered on infusing software assurance into introductory computer science courses at two-year and four-year colleges and universities. The latest curricular volume published September 2011 will be distributed at the session and includes a review of related curricula, outcomes and body of knowledge, expected background of target audiences, and outlines of six courses. These curricular materials are also available online at ***/library/abstracts/reports/***.

关键词： computer security secure coding software assurance curriculum computer science information assurance

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：