QoSec: A Novel Middleware-Based Approach to Teaching Computer Security Courses

计算机科学(31)这个项目为计算机安全课程项目开发了一个可扩展的中间件框架QoSec。QoSec框架为本科生提供了与大型可信计算机系统设计相关的学习材料。QoSec中的课程项目是作为基于中间件的框架的插件模块实现的。QoSec框架是第一个专门为教授本科生如何使现实世界的计算系统更负责任、更不容易受到攻击而设计的此类教材。该项目创建了一种基于中间件的新方法来教本科生如何开发大规模安全软件。QoSec解决了当代计算机安全教育的几个挑战，包括缺乏研究现实世界安全计算机系统的新方法；需要一个构建计算机安全项目的整体平台；以及使用基于商业中间件的框架来教授计算机安全入门课程的挑战。QoSec有一个简单的界面，允许教授学生快速开发安全关键软件。该项目对推进现代高校计算机安全课程教学具有一定的借鉴意义。预期成果包括解决信息保障、技能短缺和培养未来计算机安全工程师的问题。通过与塔斯基吉大学和阿拉巴马州立大学的合作，QoSec被用来培养未来具有计算机安全专业知识的少数族裔工程师和科学家。QoSec的可扩展性使教师可以轻松共享、扩展和修改他们的计算机安全课程项目。

Computer Science (31) This project develops QoSec, an extensible middleware framework for computer security course projects. The QoSec framework provides learning materials for undergraduate students related to the design of large-scale trustworthy computer systems. Course projects in QoSec are implemented as plug-in modules of a middleware-based framework. The QoSec framework is the first educational material of its kind designed specifically to teach undergraduate students how to make real-world computing systems more accountable and less vulnerable to attacks.The project creates a novel middleware-based approach to teaching undergraduate students how to develop large-scale secure software. QoSec addresses several challenges of contemporary computer security education including the lack of novel approaches to study real-world secure computer systems; the need of a holistic platform for constructing computer security projects; and the challenge of using commercial middleware-based frameworks to teach introductory computer security classes. QoSec has an easy interface which allows teaching students the rapid development of security-critical software. The project has a potential to advance the education of modern university computer security course curricula. Anticipated outcomes include addressing the problem of information assurance skill shortage and preparation of future computer security engineers. Through collaboration with Tuskegee University and Alabama State University, QoSec is used to prepare future minority engineers and scientists with expertise in computer security. The extensible nature of QoSec allows instructors to easily share, expand, and modify their computer security course projects.