Development of a Software Security Learning Environment
Development of a Software Security Learning Environment
复制标题
软件安全学习环境的开发
DOI：
10.1109/snpd.2012.65
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Atsuo Hazeyama and Hiroto Shimizu
中科院分区：
文献类型：
--
作者：
上松信;椋木雅之;美濃導彦;小柳和喜雄;Atsuo Hazeyama and Hiroto Shimizu
随着互联网上提供的服务的增加，软件安全技术的重要性日益得到认可。必须培养具备软件安全技术相关知识和技能的人力资源。本文提出了一个学习过程的软件安全和学习环境，支持学习过程。在学习过程中，学习者通过参考软件安全的参考信息（标准、方法、指南、安全模式等），从传统软件工程课程中创建的工件中创建软件安全的工件，而不处理软件安全。该学习环境支持存储（1）在传统软件工程课程中创建的工件，（2）在软件安全课程中创建的工件，（3）参考信息和不同的参考信息之间的关系，（4）参考信息与在软件安全课程中创建的工件的基本原理和关联，以及（5）评审注释及其与在软件安全课程中创建的工件的关联。
The importance of software security technologies is increasingly being recognized with the increase in services available on the Internet. It is important to foster human resources with knowledge and skills relevant to software security technologies. This paper proposes a learning process for software security and a learning environment that supports the learning process. In the learning process, learners create artifacts for software security from artifacts created in a traditional software engineering course, without dealing with software security, by referring to the reference information for software security (standards, methodologies, guidelines, security patterns, and so on). The learning environment supports storage of (1) the artifacts created in a traditional software engineering course, (2) artifacts created in a software security course, (3) the reference information and the relationships between different pieces of the reference information, (4) the rationale and association of the reference information with the artifacts created in a software security course, and (5) review comments and their association with the artifacts created in a software security course.