Collaborative: Development and Testing of a Secure Programming Clinic

协作：安全编程诊所的开发和测试

• 批准号: 1303211
• 负责人: Matt Bishop
• 金额: $ 52.43万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-08-15 至 2020-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1303211&HistoricalAwards=false
• 关键词: Collaborative; Development; Testing; Secure; Programming

This capacity building project will create Secure Programming Clinic to enhance student learning and expertise in writing robust, secure software, analogous to a writing clinic in an English department or law school. It provides continual reinforcement of the mechanisms, methods, technologies, and need for programming with security and robustness considerations throughout a student's undergraduate coursework. The clinic would augment courses, not replace them or their content. The clinic can be tailored to meet the needs of specific groups, such as beginning students or students in a particular class. The students will likely retain and use some of these skills after they graduated, thereby improving the quality of software overall. In addition, the development of the assessment instruments to evaluate the impact of initial learning, abstraction, feedback, and meta-cognition on transfer will be a valuable contribution to computer science education researchers. The NSF's CyberCorps® SFS program funds projects that address cybersecurity education and workforce development. The Scholarship Track provides funding to award scholarships to students in cybersecurity. In return for their scholarships, recipients will work after graduation for a Federal, State, Local, or Tribal Government organization in a position related to cybersecurity for a period equal to the length of the scholarship. The Capacity Track seeks innovative proposals leading to an increase in the ability of the United States higher education enterprise to produce cybersecurity professionals. The project will test the clinic's effectiveness by developing and validating measures that reflect the ability of learners to write robust, secure software. The clinic will be tried in several different ways to gather data, and use that data to evaluate each particular clinic. The clinic procedures, instructional modules and measures will be disseminated to the educational community. This project brings to bear research in learning in conjunction with methods used in other disciplines, particularly the humanities, which have proved successful in augmenting existing courses to provide reinforcement of basic skills. From this grounding, the Secure Programming Clinic seeks to build and assess expertise in an area that spans many aspects of programming. The project further studies how to deliver this information and practice; how to frame the information so students at different levels of programming experience and skill can benefit from them; and how to use the results of the evaluation to tune the clinic and materials.

这个能力建设项目将创建安全编程诊所，以提高学生的学习和编写强大，安全软件的专业知识，类似于英语系或法学院的写作诊所。它提供了不断加强的机制，方法，技术，并需要在整个学生的本科课程的安全性和鲁棒性考虑编程。诊所将增加课程，而不是取代它们或它们的内容。诊所可以根据特定群体的需求进行定制，例如初学者或特定班级的学生。学生毕业后可能会保留并使用其中的一些技能，从而提高软件的整体质量。此外，评估工具的开发，以评估初始学习，抽象，反馈和元认知对迁移的影响将是一个有价值的贡献，计算机科学教育研究者。NSF的CyberCorps® SFS计划为解决网络安全教育和劳动力发展的项目提供资金。奖学金轨道提供资金，以授予奖学金的学生在网络安全。作为奖学金的回报，获奖者将在毕业后为联邦，州，地方或部落政府组织工作，从事与网络安全相关的职位，时间与奖学金的长度相等。能力轨道寻求创新建议，以提高美国高等教育企业培养网络安全专业人员的能力。该项目将通过开发和验证反映学习者编写健壮，安全软件的能力的措施来测试诊所的有效性。该诊所将尝试以几种不同的方式收集数据，并使用这些数据来评估每个特定的诊所。将向教育界传播诊所程序、教学单元和措施。该项目将学习研究与其他学科，特别是人文学科所用的方法结合起来，这些方法在扩大现有课程以加强基本技能方面证明是成功的。从这个基础上，安全编程诊所寻求建立和评估专业知识，在一个跨越编程的许多方面的领域。该项目进一步研究如何提供这些信息和实践;如何构建信息，以便不同编程经验和技能水平的学生可以从中受益;以及如何使用评估结果来调整诊所和材料。