TUES Type 1: Creating Educational Foundations for Assured Systems

可靠的系统，即那些具有保密性、完整性和可用性，其安全属性已被验证或证实的系统，对美国的国家安全至关重要。该项目正在开发必要的学习材料和策略，以使计算机专业的本科生具备以下能力，这些能力对于构建可靠的系统至关重要：从一开始就以需求、规范、策略和操作概念的形式考虑系统安全性的能力。使用安全性和完整性机制（例如身份验证和引用监视器）来满足机密性、完整性和可用性需求的能力。应用计算机辅助推理工具（例如定理证明器和模型检查器）来正式验证安全属性的能力。正在创建的学习材料包括一系列实际操作的实验练习，这些练习结合了安全概念和机制，以及函数式编程和定理证明。材料还包括集成安全性和保证的动手项目，要求学生走规范、设计、实现和验证的良性循环。通过这些活动，学生可以亲身体验如何将理论、概念和工具结合起来解决现实世界的问题。该项目正在确定培养毕业生所需的教育基础，这些毕业生能够建立可靠的系统来支持国家的关键基础设施。该项目的学习材料以活动为基础和模块化的性质将有助于促进广泛的教育工作者，包括那些主要专业知识不是保证的教育工作者的采用。

Assured systems, those systems that exhibit confidentiality, integrity, and availability and whose security properties have been verified or proven, are essential for the United States' national security. This project is developing the necessary learning materials and strategies to equip undergraduate computing students with the following capabilities, which are essential for building assured systems:1. The ability to account for system security from the start in the form of requirements, specifications, policies, and concepts of operation.2. The ability to use security and integrity mechanisms (such as authentication and reference monitors) to satisfy confidentiality, integrity, and availability requirements.3. The ability to apply computer-assisted reasoning tools (such as theorem provers and model checkers) to formally verify security properties.The learning materials being created include a series of hands-on lab exercises that incorporate security concepts and mechanisms, as well as functional programming and theorem proving. Materials also include hands-on projects that integrate both security and assurance, requiring students to walk the virtuous cycle of specification, design, implementation, and verification. Through these activities, students experience first-hand how theory, concepts, and tools can be combined to solve real-world problems. This project is identifying the educational foundations necessary for producing graduates who can build assured systems to support the nation's critical infrastructure. The activity-based and modular nature of the project's learning materials will help foster adoption by a wide range of educators, including those whose primary expertise is not in assurance.