TUES Type 1: Creating Educational Foundations for Assured Systems

TUES 类型 1：为有保障的系统创建教育基础

• 批准号: 1245867
• 负责人: Susan Older
• 金额: $ 20万
• 依托单位: Syracuse University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-15 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1245867&HistoricalAwards=false
• 关键词: TUES; Type; Creating; Educational; Foundations

Assured systems, those systems that exhibit confidentiality, integrity, and availability and whose security properties have been verified or proven, are essential for the United States' national security. This project is developing the necessary learning materials and strategies to equip undergraduate computing students with the following capabilities, which are essential for building assured systems:1. The ability to account for system security from the start in the form of requirements, specifications, policies, and concepts of operation.2. The ability to use security and integrity mechanisms (such as authentication and reference monitors) to satisfy confidentiality, integrity, and availability requirements.3. The ability to apply computer-assisted reasoning tools (such as theorem provers and model checkers) to formally verify security properties.The learning materials being created include a series of hands-on lab exercises that incorporate security concepts and mechanisms, as well as functional programming and theorem proving. Materials also include hands-on projects that integrate both security and assurance, requiring students to walk the virtuous cycle of specification, design, implementation, and verification. Through these activities, students experience first-hand how theory, concepts, and tools can be combined to solve real-world problems. This project is identifying the educational foundations necessary for producing graduates who can build assured systems to support the nation's critical infrastructure. The activity-based and modular nature of the project's learning materials will help foster adoption by a wide range of educators, including those whose primary expertise is not in assurance.

有保证的系统，即那些表现出机密性、完整性和可用性，并且其安全属性已经过验证或证明的系统，对美国的国家安全至关重要。该项目正在开发必要的学习材料和策略，以使本科计算机专业的学生具备以下能力，这些能力对于构建有保证的系统至关重要：1。从一开始就以需求、规范、策略和操作概念的形式说明系统安全性的能力。使用安全性和完整性机制（如身份验证和引用监视器）来满足机密性、完整性和可用性要求的能力。应用计算机辅助推理工具（如定理证明器和模型检查器）正式验证安全属性的能力。正在创建的学习材料包括一系列动手实验练习，其中包含安全概念和机制，以及函数式编程和定理证明。 材料还包括集成安全和保证的实践项目，要求学生走规范，设计，实施和验证的良性循环。通过这些活动，学生亲身体验理论，概念和工具如何结合起来解决现实世界的问题。该项目正在确定必要的教育基础，以培养能够建立有保证的系统以支持国家关键基础设施的毕业生。 该项目学习材料的活动性和模块性将有助于促进广泛的教育工作者采用，包括那些主要专业知识不确定的教育工作者。