Secure e-Commerce: A Modular Course Supported by Virtual Laboratories

计算机科学（31）这个项目是建立在现有的软件实验室的成功，以支持在以前的NSF奖（DUE 0127300）开发的电子商务技术的计算机科学课程，以扩大电子商务教育，通过开发和传播的材料，侧重于电子商务技术的一个关键要素：安全。这个项目的目标是传播以前项目的材料，并应对计算机科学领域的重大挑战之一-编写安全软件。之前的项目致力于开发用于培训学生编程电子商务商店组件的材料。该项目正在开发、测试和改进强调电子商务软件安全要求的教材。PI正在开发协调的讲座材料和支持软件实验室练习（“虚拟实验室”），在以下关键领域：（1）密码学-安全数学;（2）职业道德-责任感应先于知识和能力;（3）发现和防范攻击-黑客技术;（4）无线接入-移动的商务的推动者;（5）Web服务-电子商务安全的新方法;（6）身份验证、授权和联合-促进不同系统之间的身份管理和信任共享的关键Web服务组件。这种技术方法明显不同于许多现有电子商务课程中采用的商业/法律的方法。项目重点领域包括：- 安全和安全编码哲学，策略，工具和技术; -计算机科学家和哲学家之间的合作- 使用和评估六种互动式员工支持：办公时间，电子邮件，NetMeeting，IM，FAQ和学生操作的留言板;- 在三个夏季为20至25名教员举办“教师培训”讲习班，其中包括社区学院、文科学院以及科学和工程专业的教员;- 强调“在上下文中编程”，学生可以看到他们的作品的实际应用和社会价值; -提供工作人员支持其他学校的教师采用，实施，使用和评估这些材料;多机构定性和定量评估这些材料是否以及如何改变学生的学习成果。

Computer Science (31)This project is building on the success of an existing software laboratory to support a computer science course on Electronic Commerce Technologies developed under a prior NSF award (DUE 0127300) to expand e-commerce education by developing and disseminating materials that focus on a key element of e-commerce technology: security. The goal of this project is disseminate materials from the previous project and to respond to one of the grand challenges in the field of computer science - writing secure software. The prior project was devoted to developing materials to be used in training students to program components of e-commerce stores. This project is developing, testing, and refining teaching materials that emphasize the security requirements of e-commerce software. The PIs are developing coordinated lecture materials and supporting software laboratory exercises ("virtual labs"), in the following critical areas: (1) Cryptography - the mathematics of security; (2) Professional ethics - a sense of responsibility should precede knowledge and empowerment; (3) Detecting and defending against attacks - the technology of hacking; (4) Wireless access - the enabler for mobile commerce; (5) Web services - a new approach to e-commerce security; (6) Authentication, authorization, and federation - the crucial web service components that facilitate identity management and trust sharing among disparate systems. This technical approach differs markedly from the business/legal approach taken in many extant e-commerce courses. Project emphasis areas include: - security and on secure coding philosophies, strategies, tools, and techniques; - collaboration between a computer scientist and philosopher (ethicist) leading to an emphasis on professional ethics; - use and evaluation of six types of interactive staff support: office hours, email, NetMeeting, IM, FAQs, and student-operated message boards; - a "teach-the-teachers" workshop for 20-25 faculty in the three summers, to include faculty from community colleges, liberal arts colleges, and science and engineering programs; - a well-designed effort to recruit women and minorities in every aspect of the proposed work; - an emphasis on "programming in context" in which students can see the practical application and social value of their artifacts; - providing staff to support faculty at other schools with their adoption, implementation, use, and evaluation of these materials; and - a multi-institution qualitative and quantitative evaluation of whether and how these materials changed learning outcomes for the students.