Secure Modules for Undergraduate Software Engineering Courses
Secure Modules for Undergraduate Software Engineering Courses
复制标题
本科软件工程课程的安全模块
DOI：
10.1109/fie.2018.8658433
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Young Lee
中科院分区：
文献类型：
--
作者：
Jeong Yang;A. Lodgher;Young Lee
安全性影响不同类型计算系统中的每个软件组件。软件系统上的许多漏洞和攻击都是由于软件本身的安全弱点造成的。在软件规格说明、开发或测试过程中，安全问题要么考虑不足，要么根本没有考虑。这类软件由于内部的弱点很容易受到新的攻击。透过教授安全软件工程技术，设计和开发软件模块，学生将学习系统的安全软件开发技术，如缺陷检测和安全测试。本文提出了一系列的模块，旨在从安全的角度集成到本科软件工程课程。这些模块的目标是通过安全的软件开发生命周期来教授建立强大的软件安全要求，安全的软件设计和开发以及安全的软件验证。
Security affects every software component in different types of computing systems. Many vulnerabilities and attacks on software systems are due to security weaknesses in the software itself. During the process of software specification, development, or testing, security issues are either taken into consideration insufficiently or not at all. Such software, due to internal weaknesses is prone to new attacks. By teaching secure software engineering techniques for designing and developing software modules, students would learn systematic secure software development techniques, such as defect detecting and security testing. This paper presents a series of modules that are designed to be integrated into undergraduate software engineering courses from a security perspective. The goal of the modules is to teach the building of robust software security requirements, secure software design and development, and secure software verification through a secure software development lifecycle.