检索结果-内蒙古大学图书馆

Proceedings of the 2020 International Conference on Big Data in Management

作者： Parth Sane Rochester Institute of Technology

ISBN: (纸本)9781450375061

The OWASP Top 10 is a list that is published by the Open Web Application Security Project (OWASP). The general purpose is to serve as a watchlist for bugs to avoid while writing code. This paper compares how many of those weakness as described in the top ten list are actually reported in vulnerabilities listed in the National Vulnerability Database (NVD). That way it makes it possible to empirically show whether the OWASP Top 10 list is comprehensive enough or not, for code weaknesses that have been found in the past decade.

关键词： secure coding vulnerabilities OWASP analysis

来源：评论

学校读者我要写书评

暂无评论

Teaching Security Using Hands-on Exercises in 2015 (Abstract Only) 15

Teaching Security Using Hands-on Exercises in 2015 (Abstract...

引用

Proceedings of the 46th ACM Technical Symposium on Computer Science Education

作者： Richard Weiss Michael Locasto Jens Mache Blair Taylor Elizabeth Hawthorne Justin Cappos Ambereen Siraj The Evergreen State College Olympia WA USA The University of Calgary Calgary AB Canada Lewis & Clark College Portland OR USA Towson University Towson MD USA Union County College Cranford NJ USA New York University New York NY USA Tennessee Technical University Cookeville TN USA

ISBN: (纸本)9781450329668

We see teaching cybersecurity through hands-on, interactive exercises as a way to engage students. Some of the exercises that we have seen require significant preparation on the part of the instructor. Having a community makes it easier to share exercises, knowing what works and what problems students and instructors have encountered. The purpose of this BOF is to bring together instructors who have developed hands-on exercises, those who have used them and those who would like to. We recognize that few CS programs can afford new required courses, so we will discuss ways to integrate security-related exercises into existing ones. This could include networking, OS, computer architecture, programming languages, software engineering, algorithms and programming. The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for?"Recent hiring forecasts indicate that there is still a tremendous need for skilled information security experts. Security is one of the core areas in the ACM/IEEE COMPUTER SCIENCE 2013 Curricula. It is particularly important to share stories from the classroom (what worked and what didn't), discuss ethical hacking, and discuss how to teach analytical skills. We plan to share experiences, practices and ongoing efforts, including our own (e.g., our teaching experiences, the SISMAT program, Security Injections, the Seattle Platform, the Security Knitting Kit project, EDURange and the dissemination of infosec interactive exercises).

关键词： secure coding security hacker curriculum laboratory exercises

来源：评论

学校读者我要写书评

暂无评论

Locating SQL Injection Vulnerabilities in Java Byte Code using Natural Language Techniques

Locating SQL Injection Vulnerabilities in Java Byte Code usi...

引用

IEEE SoutheastCon

作者： Kevin A. Jackson Brian T. Bennett Department of Computing East Tennessee State University Johnson City TN USA

ISBN: (纸本)9781538661345

With so much our daily lives relying on digital devices like personal computers and cell phones, there is a growing demand for code that not only functions properly, but is secure and keeps user data safe. However, ensuring this is not such an easy task, and many developers do not have the required skills or resources to ensure their code is secure. Many code analysis tools have been written to find vulnerabilities in newly developed code, but this technology tends to produce many false positives, and is still not able to identify all of the problems. Other methods of finding software vulnerabilities automatically are required. This proof-of-concept study applied natural language processing on Java byte code to locate SQL injection vulnerabilities in a Java program. Preliminary findings show that, due to the high number of terms in the dataset, using singular decision trees will not produce a suitable model for locating SQL injection vulnerabilities, while random forest structures proved more promising. Still, further work is needed to determine the best classification tool.

关键词： Code analysis Natural Language Processing Security secure coding Java Python

来源：评论

学校读者我要写书评

暂无评论

Discussion of Integrating Hands-on Cybersecurity Exercises into the Curriculum in 2019 19

Discussion of Integrating Hands-on Cybersecurity Exercises i...

引用

Proceedings of the 50th ACM Technical Symposium on Computer Science Education

作者： Richard Weiss Jens Mache Blair Taylor Siddharth Kaza Ankur Chattopadhyay Evergreen State College Olympia WA USA Lewis and Clark College Portland OR USA Towson University Towson MD USA University of Wisconsin at Green Bay Green Bay WI USA

ISBN: (纸本)9781450358903

The critical shortage of cyber security professionals remains an unsolved problem. We need to greatly expand the community in order to meet the increasing demand. The number of security-focused competitions and exercises has increased in recent years. As faculty we need to choose those that we can best integrate into our courses. As a community, we can think about how to create a more unified environment to contribute to each other's projects. We would like to bring together new and experienced faculty to build community and engage in this work. We have set up a dedicated Facebook to allow us to work together outside of SIGCSE events. During the BoF, we will encourage participants to sign up for the closed group, and we will ask the questions, 'What do you want from this learning community? What exercises have you heard about or tried?" One benefit of having a learning community is that it will be easier to provide support for new members to learn about resources and get help. These resources include exercises, webinars, and slides. We will share experiences, practices and ongoing efforts (NSA's National Cybersecurity Curriculum Program), including our own (e.g. Security Injections, Security Knitting Kit, EDURange and UWGB GenCyber). The BoF also benefits experienced members, helping them to disseminate their work and reach other faculty with similar interests. We will discuss what works and what problems students and instructors have encountered. We will discuss ways to integrate security-related exercises into existing courses.

关键词： secure coding cybersecurity laboratory exercises security hacker curriculum

来源：评论

学校读者我要写书评

暂无评论

Assessment of Security Knowledge, Skills and Abilities using Hands-On Exercises in 2016 (Abstract Only) 16

Assessment of Security Knowledge, Skills and Abilities using...

引用

Proceedings of the 47th ACM Technical Symposium on Computing Science Education

作者： Richard Weiss MIchael E. Locasto Jens Mache Blair Taylor Elizabeth Hawthorne Siddharth Kaza Ambareen Siraj The Evergreen State College Olympia WA USA University of Calgary Calgary AB Canada Lewis and Clark College Portland OR USA Towson University Towson MD USA Union County College Cranford NJ USA Tennessee Tach University Cookeville TN USA

ISBN: (纸本)9781450336857

We see teaching cybersecurity through hands-on, interactive exercises as a way to engage students. However, we also want to assess how much students are learning from these exercises, and the exercises themselves could be used to assess what students know. Creating new hands-on exercises requires significant preparation on the part of the instructor. As a community we have begun to share exercises and discuss what works and what problems students and instructors have encountered. The purpose of this BOF is two-fold: 1) to continue to bring together instructors who have developed hands-on exercises with those who would like to use them, and 2) extend the discussion to include assessment of student learning. We recognize that few CS programs can afford new required courses, so we will discuss ways to integrate security-related exercises into existing ones. This could include networking, OS, computer architecture, programming languages, software engineering, algorithms and programming (CS0, CS1, CS2). The questions we will ask are, "What exercises have you tried? What are your experiences? What are you looking for? What are the learning goals for your students? How do you assess them?"Recent hiring forecasts indicate that there is still a tremendous need for skilled information security experts. Security is one of the core areas in the ACM/IEEE COMPUTER SCIENCE 2013 Curricula. It is particularly important to share stories from the classroom (what worked and what didn't), discuss ethical hacking, discuss how to teach and evaluate analytical skills, and discuss how we know if we are making a difference. We plan to share experiences, practices and ongoing efforts, including our own (e.g., our teaching experiences, Security Injections, the Security Knitting Kit project, The EDURange project and our dissemination of other infosec interactive exercises such as SEED labs). Both Security Injections and EDURange have features that address assessment.

关键词： security education assessment hacker curriculum security cybersecurity secure coding

来源：评论

学校读者我要写书评

暂无评论

Embedding security into visual programming courses 11

Embedding security into visual programming courses

引用

Proceedings of the 2011 Information Security Curriculum Development Conference

作者： Myung Ah Park University of Central Oklahoma Edmond OK

ISBN: (纸本)9781450308120

A visual programming course can be set up in a way that draws a general audience from different disciplines in addition to serving majors. Thereby embedding security into a visual programming course can be effective not only in raising future security workforce, but also in promoting security awareness for non-majors. Moreover, an instructor can create a subsequent advanced course where students can reinforce and expand secure coding practices as well as learn security principles. However, most visual programming books that are suitable as textbooks usually do not deal with security issues. Even if they do, minimal discussion is usually included, even being without connection to security principles. Therefore, in order to imbed security into a visual programming course, instructors are required to spend enormous time in preparation. In this paper, we set out to provide a guideline for embedding security into a visual programming course. Specifically, we will discuss basic and advanced secure coding techniques along with related security principles.

关键词： information security education security application secure coding visual C# security principles visual basic

来源：评论

学校读者我要写书评

暂无评论

Hello world!: code responsibly: why cyber is a game changer for computer science education 20

Hello world!: code responsibly: why cyber is a game changer ...

引用

Proceedings of the 9th Computer Science Education Research Conference

作者： Blair Taylor Towson University

ISBN: (纸本)9781450388726

Cybersecurity continues to be a global crisis. The ever-growing need for cyber talent has challenged universities to build and expand cybersecurity programs, despite an acute shortage of cybersecurity *** every challenge comes opportunity. Can cybersecurity draw more students to computer science? Given the appropriate resources, can teaching cyber create opportunities for computer science educators to engage students and increase diversity? To address the cyber crisis, all university programs should offer an introduction to cyber course, all programming classes should teach responsible coding, and we should integrate security across the curriculum.

关键词： secure coding computer science education cybersecurity

来源：评论

学校读者我要写书评

暂无评论

Hands-on Cybersecurity Exercises That are Easy to Access and Assess (Abstract Only) 17

Hands-on Cybersecurity Exercises That are Easy to Access and...

引用

Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education

作者： Richard Weiss Jens Mache Michael E. Locasto Frankly Turbak The Evergreen State College Olympia WA USA Lewis and Clark College Portland OR USA SRI International New York NY USA Wellesley College Wellesley MA USA

ISBN: (纸本)9781450346986

Cybersecurity is a topic of growing interest for CS educators. The goal of this workshop is to empower faculty to add hands-on security exercises to their courses. We introduce EDURange, a framework for accessing, developing and assessing interactive cybersecurity exercises. We want to reach and engage all students. The first step is to have interesting challenges that are easy to access. EDURange uses VMs in a public cloud, which also provides flexible resources. No software needs to be installed - students only need an ssh client. Another step is to give students feedback on how they are doing. This is an important role for faculty and is not something to automate. Instead, EDURange provides basic tools to visualize what students are doing as they work on the exercises. This allows instructors to more easily see when students are stuck or heading in the wrong direction. Since cybersecurity exercises are often easy to understand but hard to solve, guidance is especially important so that students don't become frustrated. In this workshop, participants will get to try EDURange and several exercises, including an introduction to ssh. Participants don't need to be security experts. We will provide sample syllabuses for an introductory security course as well as an interdisciplinary security course, and we will show how our exercises can be integrated into these courses. More information at http://***. Laptop required.

关键词： hacker curriculum cybersecurity laboratory exercises secure coding security

来源：评论

学校读者我要写书评

暂无评论

Teaching safe coding via comparative languages

Journal of Computing Sciences in Colleges

引用

Journal of Computing Sciences in Colleges 2017年第4期32卷

作者： David A. Cook Anne Marie Eubanks Stephen F. Austin State University

We recently taught a Special Projects course aimed at introducing students into writing safe code - code that would be robust and reliable in embedded or real-time applications. This paper is a synopsis of the experie... 详细信息

关键词： ada embedded coding exception handling real-time and parallel processing safe coding secure coding

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：