EDU: Motivating and Reaching University Students and Professionals with Software Security Education

EDU：通过软件安全教育激励和影响大学生和专业人士

• 批准号: 1318428
• 负责人: Laurie Williams
• 金额: $ 30万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1318428&HistoricalAwards=false
• 关键词: EDU; Motivating; Reaching; University; Students

This project involves the development and delivery of software security education to university students and professionals, and the dissemination of curricular materials to educators to enable effective security education throughout their courses. A large intentionally vulnerable electronic health record (EHR) application with associated artifacts to support the lessons is provided to all student and educators. Instances of the EHR application are hosted in a virtual environment such that students can get their own virtual instance and practice attacks against the system whereby the attacks would be contained/safe and not cause actual damages. All curricular resources are made freely available to educators. Students are educated in a laboratory-based course with learning objectives met through active learning exercises. Professionals are provided with options for taking the course via a Massively Open Online Course (MOOC) or by taking a course through an always-available system. The educational practices (a) increase the knowledge level of practitioners and students in issues related to software security; and (b) increase the understanding of two forms of online education and on active learning in the university classroom. The research enhances the infrastructure by providing open resources and educational modules for software security. The work improves the ability of practitioners to produce secure and reliable software products so that people can justifiably rely upon computer systems to perform critical functions securely.

该项目涉及为大学生和专业人员开发和提供软件安全教育，并向教育工作者分发教材，以便在整个课程中进行有效的安全教育。一个大型的故意脆弱的电子健康记录（EHR）应用程序与相关的工件，以支持课程提供给所有的学生和教育工作者。 EHR应用程序的实例托管在虚拟环境中，这样学生就可以获得自己的虚拟实例并对系统进行攻击，从而使攻击受到控制/安全，不会造成实际损害。 所有课程资源都免费提供给教育工作者。 学生在实验室为基础的课程与学习目标，通过积极的学习练习满足教育。 专业人士可以选择通过大规模开放式在线课程（MOOC）或通过始终可用的系统参加课程。教育实践（a）提高了从业人员和学生对软件安全相关问题的知识水平;（B）提高了对两种形式的在线教育和大学课堂主动学习的理解。 该研究通过提供软件安全的开放资源和教育模块来增强基础设施。 这项工作提高了从业人员生产安全可靠的软件产品的能力，使人们能够可靠地依靠计算机系统安全地执行关键功能。