QoSec: A Novel Middleware-Based Approach to Teaching Computer Security Courses

计算机科学（31）这个项目开发QoSec，一个可扩展的中间件框架，用于计算机安全课程项目。QoSec框架为本科生提供了与大型可信计算机系统设计相关的学习材料。在QoSec课程项目实现为基于中间件的框架的插件模块。QoSec框架是第一个专门设计用于教授本科生如何使真实世界的计算系统更可靠和更不易受到攻击的教育材料。该项目创建了一种新颖的基于中间件的方法来教授本科生如何开发大规模安全软件。QoSec解决了当代计算机安全教育的几个挑战，包括缺乏新的方法来研究现实世界的安全计算机系统;需要一个整体的平台来构建计算机安全项目;以及使用基于商业中间件的框架来教授入门计算机安全课程的挑战。QoSec有一个简单的界面，可以教学生快速开发安全关键软件。该项目有可能推进现代大学计算机安全课程的教育。预期的成果包括解决信息保证技能短缺的问题和未来的计算机安全工程师的准备。通过与塔斯基吉大学和亚拉巴马州立大学的合作，QoSec用于培养未来具有计算机安全专业知识的少数民族工程师和科学家。QoSec的可扩展性使教师可以轻松地共享，扩展和修改他们的计算机安全课程项目。

Computer Science (31) This project develops QoSec, an extensible middleware framework for computer security course projects. The QoSec framework provides learning materials for undergraduate students related to the design of large-scale trustworthy computer systems. Course projects in QoSec are implemented as plug-in modules of a middleware-based framework. The QoSec framework is the first educational material of its kind designed specifically to teach undergraduate students how to make real-world computing systems more accountable and less vulnerable to attacks.The project creates a novel middleware-based approach to teaching undergraduate students how to develop large-scale secure software. QoSec addresses several challenges of contemporary computer security education including the lack of novel approaches to study real-world secure computer systems; the need of a holistic platform for constructing computer security projects; and the challenge of using commercial middleware-based frameworks to teach introductory computer security classes. QoSec has an easy interface which allows teaching students the rapid development of security-critical software. The project has a potential to advance the education of modern university computer security course curricula. Anticipated outcomes include addressing the problem of information assurance skill shortage and preparation of future computer security engineers. Through collaboration with Tuskegee University and Alabama State University, QoSec is used to prepare future minority engineers and scientists with expertise in computer security. The extensible nature of QoSec allows instructors to easily share, expand, and modify their computer security course projects.