CAREER: Test-Driven Development of Secure and Reliable Software Applications

职业：安全可靠的软件应用程序的测试驱动开发

• 批准号: 0346903
• 负责人: Laurie Williams
• 金额: $ 39.99万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-04-01 至 2011-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0346903&HistoricalAwards=false
• 关键词: CAREER; Test; Driven; Development; Secure

ABSTRACT0346903Laurie WilliamsNorth Carolina State UniversityCAREER: The Test-Driven Development of Secure and Reliable Software ApplicationsOur nation's critical infrastructure demands that our current and future IT professionals have the knowledge, tools, and techniques to produce reliable and trustworthy software. The objective of this research is to extend, validate, and disseminate a software development practice to aid in the prevention of computer-related disasters. The practice is based upon test-driven development (TDD), a software development technique with tight verification and validation feedback loops. The proposed work extends the TDD practice and provides a supportive open-source tool for explicitly situating security as a primary attribute considered in these tight feedback loops. Additionally, the research examines the composition of TDD and pair programming/pair testing as a security- and reliability-enhancing tuple of development practices. The study will also examine the potential of pair programming/pair testing for improving the success/retention of socially-oriented women, men, and minorities in the IT workforce. The intellectual merits of this proposal include an enhanced TDD-based software development practice to mitigate security concerns and a catalog of security testing patterns disseminated via the Internet. The broad impacts of the proposal include an interuniversity student competition to build excitement about developing secure and reliable software applications and a revised undergraduate software engineering textbook integrating security and reliability topics.

Laurie Williams北卡罗莱纳州立大学职业：安全可靠软件应用程序的测试驱动开发我们国家的关键基础设施要求我们当前和未来的IT专业人员拥有生产可靠和值得信赖的软件的知识、工具和技术。 本研究的目的是扩展，验证和传播软件开发实践，以帮助预防计算机相关的灾难。 实践基于测试驱动开发（TDD），这是一种具有紧密验证和确认反馈循环的软件开发技术。 拟议的工作扩展了TDD实践，并提供了一个支持性的开源工具，用于明确地将安全性作为这些紧密反馈回路中考虑的主要属性。 此外，该研究还将TDD和配对编程/配对测试的组成作为开发实践的安全性和可靠性增强元组。 该研究还将探讨结对编程/结对测试的潜力，以提高IT劳动力中面向社会的女性，男性和少数民族的成功/保留。 这一建议的知识价值包括一个增强的基于TDD的软件开发实践，以减轻安全问题，并通过互联网传播一个安全测试模式目录。 该提案的广泛影响包括大学间的学生竞赛，以建立对开发安全可靠的软件应用程序的兴奋，以及整合安全性和可靠性主题的修订版本科软件工程教科书。