EDU: Motivating and Reaching University Students and Professionals with Software Security Education

EDU：通过软件安全教育激励和影响大学生和专业人士

• 批准号: 1318428
• 负责人: Laurie Williams
• 金额: $ 30万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1318428&HistoricalAwards=false
• 关键词: EDU; Motivating; Reaching; University; Students

This project involves the development and delivery of software security education to university students and professionals, and the dissemination of curricular materials to educators to enable effective security education throughout their courses. A large intentionally vulnerable electronic health record (EHR) application with associated artifacts to support the lessons is provided to all student and educators. Instances of the EHR application are hosted in a virtual environment such that students can get their own virtual instance and practice attacks against the system whereby the attacks would be contained/safe and not cause actual damages. All curricular resources are made freely available to educators. Students are educated in a laboratory-based course with learning objectives met through active learning exercises. Professionals are provided with options for taking the course via a Massively Open Online Course (MOOC) or by taking a course through an always-available system. The educational practices (a) increase the knowledge level of practitioners and students in issues related to software security; and (b) increase the understanding of two forms of online education and on active learning in the university classroom. The research enhances the infrastructure by providing open resources and educational modules for software security. The work improves the ability of practitioners to produce secure and reliable software products so that people can justifiably rely upon computer systems to perform critical functions securely.

该项目涉及向大学生和专业人士开发和提供软件安全教育，以及向教育工作者传播课程材料，以在整个课程中实现有效的安全教育。大型有意脆弱的电子健康记录（EHR）应用程序，并向所有学生和教育者提供了支持课程的相关工件。 EHR应用程序的实例托管在虚拟环境中，以便学生可以获得自己的虚拟实例并练习对系统的攻击，从而将攻击包含/安全，并且不会造成实际损害。 所有课程资源都可以免费提供给教育工作者。 在基于实验室的课程中对学生进行教育，并通过积极的学习练习实现了学习目标。 为专业人士提供了通过大规模开放的在线课程（MOOC）或通过始终可用系统参加课程的选项。教育实践（a）在与软件安全有关的问题中提高了从业者和学生的知识水平； （b）提高对两种形式的在线教育和在大学课堂上积极学习的理解。 该研究通过为软件安全提供开放资源和教育模块来增强基础架构。 这项工作提高了从业者生产安全可靠的软件产品的能力，以便人们可以合理地依靠计算机系统安全地执行关键功能。