Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE
Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE
复制标题
将安全编码指令嵌入到 IDE 中：使用 ESIDE 补充早期和中级 CS 课程
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Tyler Thomas
中科院分区：
文献类型：
--
作者：
Michael Whitney;H. Lipford;Bill Chu;Tyler Thomas
人们当今面临的许多软件安全漏洞都可以通过安全编码实践来修复。安全编码实践的关键一步是确保我们的计算学生接受这些实践的教育。我们认为，安全编码教育需要包括在整个计算课程。我们正在研究一种方法，通过将学生的集成开发环境转变为安全编码教学的教育资源，来补充传统的课堂教学。在这篇文章中，我们报告了两个形成性和一个总结性的研究，使用我们的工具教育安全的集成开发环境（ESIDE）在早期和中期的计算机科学编程课程。我们的研究结果支持这种方法的可行性，以增加安全编程知识和学生的意识，并确定几个挑战，最大限度地提高编程课程的学习机会。
Many of the software security vulnerabilities that people face today can be remediated through secure coding practices. A critical step toward the practice of secure coding is ensuring that our computing students are educated on these practices. We argue that secure coding education needs to be included across a computing curriculum. We are examining an approach that complements traditional classroom instruction by turning the student’s integrated development environment into an educational resource for secure coding instruction. In this article, we report on two formative and one summative study using our tool Educational Security in the Integrated Development Environment (ESIDE) in early and intermediate computer science programming courses. Our results support the viability of this approach to increase secure programming knowledge and awareness of students and also to identify several challenges for maximizing the learning opportunities within programming courses.