EDU: Deploying and Evaluating Secure Programming Education in the IDE

EDU：在 IDE 中部署和评估安全编程教育

• 批准号: 1523041
• 负责人: Heather Lipford
• 金额: $ 29.98万
• 依托单位: University of North Carolina at Charlotte
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2019-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1523041&HistoricalAwards=false
• 关键词: EDU; Deploying; Evaluating; Secure; Programming

A number of researchers have advocated that secure programming instruction be integrated across a computing curriculum but there have been relatively few efforts examining how to successfully do so. The proposed research expands upon a previous project by focusing on advanced computing students and courses. The proposed activities include expanding ESIDE tool implementation to support a broader range of security guidelines and code, providing increased contextualization of the instructional materials within the tool, and developing materials and practices for faculty adopting the tool.The preliminary research demonstrated that ESIDE can potentially provide greater awareness and knowledge of secure programming. The primary goal is to investigate whether ESIDE can increase students' awareness, knowledge, and practice of secure programming. The project will also examine the incentives, course structures, and faculty support that enable successful use and learning with ESIDE within advanced computing courses. Through multiple deployment studies, the project will gather measures of student attitudes, learning, and behaviors, as well as course and faculty measures that impact ESIDE use.The outcomes of this research will provide a better understanding of the integration of secure programming instruction within a computing curriculum, as well as a deployable tool for faculty to adopt. Through the deployment of ESIDE in the proposed research, the project will directly impact students in at least 8 computing courses at different institutions, including a HBCU. This research will inform the broader community on the potential for integrated learning of security practices, and the specific tool design and course practices that facilitate that learning. The resulting tool and educational materials can then be adopted or expanded by faculty and educators. The project will disseminate the ESIDE tool by releasing it as an open source project; publishing at education and security venues; and working with an author of a popular Java textbook to include the tool in future editions.

许多研究人员主张将安全编程教学整合到整个计算课程中，但研究如何成功做到这一点的努力相对较少。拟议的研究扩展了之前的项目，重点关注高级计算学生和课程。拟议的活动包括扩大 ESIDE 工具的实施以支持更广泛的安全指南和代码，提供工具内教学材料的更多情境化，以及为采用该工具的教师开发材料和实践。初步研究表明，ESIDE 可以潜在地提供提高对安全编程的认识和知识。主要目标是调查 ESIDE 是否可以提高学生的安全编程意识、知识和实践。该项目还将研究激励措施、课程结构和教师支持，以确保在高级计算课程中成功使用和学习 ESIDE。通过多次部署研究，该项目将收集学生态度、学习和行为的衡量标准，以及影响 ESIDE 使用的课程和教师衡量标准。这项研究的结果将有助于更好地理解安全编程教学在计算课程，以及供教师采用的可部署工具。通过在拟议研究中部署 ESIDE，该项目将直接影响不同机构（包括 HBCU）至少 8 门计算机课程的学生。这项研究将使更广泛的社区了解安全实践综合学习的潜力，以及促进这种学习的具体工具设计和课程实践。由此产生的工具和教育材料可以被教师和教育工作者采用或扩展。该项目将通过将 ESIDE 工具作为开源项目发布来传播它；在教育和安全场所出版；并与一本流行的 Java 教科书的作者合作，将该工具包含在未来的版本中。