Secure Software Engineering Education: Knowledge Area, Curriculum and Resources
Secure Software Engineering Education: Knowledge Area, Curriculum and Resources
复制标题
安全软件工程教育：知识领域、课程和资源
DOI：
10.62915/2472-2707.1004
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
B. Chu
中科院分区：
文献类型：
--
作者：
Xiaohong Yuan;Li Yang;B. Jones;Huiming Yu;B. Chu
本文回顾了当前安全软件工程教育方面的努力和资源，旨在为教育工作者利用这些资源开发安全软件工程课程提供指导。这些资源包括公共知识体系、参考课程、示例课程材料、实践练习以及行业和开源社区开发的资源。讨论了美国国土安全部、卡内基梅隆大学软件工程研究所和ACM/IEEE提出的公共知识体系之间的关系。回顾了安全软件工程教育的最新实践，包括安全软件工程相关的课程、课程和课程模块。课程单元分为四类，以方便采用这些课程单元。可用的手把手练习开发的教学软件的安全性进行了描述和映射到分类的编码错误。综述了工业界和开源社区开发的各种安全软件开发过程、方法和工具。提供了一个路线图，以组织这些资源，并指导教育工作者采用这些资源，并将其纳入他们的课程。
This paper reviews current efforts and resources in secure software engineering education, with the goal of providing guidance for educators to make use of these resources in developing secure software engineering curriculum. These resources include Common Body of Knowledge, reference curriculum, sample curriculum materials, hands-on exercises, and resources developed by industry and open source community. The relationship among the Common Body of Knowledge proposed by the Department of Homeland Security, the Software Engineering Institute at Carnegie Mellon University, and ACM/IEEE are discussed. The recent practices on secure software engineering education, including secure software engineering related programs, courses, and course modules are reviewed. The course modules are categorized into four categories to facilitate the adoption of these course modules. Available handson exercises developed for teaching software security are described and mapped to the taxonomy of coding errors. The rich resources including various secure software development processes, methods and tools developed by industry and open source community are surveyed. A road map is provided to organize these resources and guide educators in adopting these resources and integrating them into their courses.