EDU:Collaborative: VACCS - Visualization and Analysis for C Code Security

拟议的项目将开发C代码安全可视化和分析(VACCS)工具，以帮助学生学习安全代码编程。该提案通过开发一个分析和可视化C代码及相关学习材料的系统，解决了学习安全编码的关键问题。VACCS将利用静态和动态程序分析来检测安全漏洞，并就代码中的潜在错误向程序员发出警告。该研究团队在使用可视化教授并行计算、几何建模和数据加密等领域的计算机科学方面拥有丰富的经验。该项目将开发常见安全漏洞的可视化和动画，可以为具有不同编程经验的程序员定制。该项目将评估VACCS和教材在改善学生学习安全编码方面的有效性。这项研究的结果将提供更好的了解可视化对计算机课程中的安全编程教学的影响，以及一个可部署的VACCS工具，供教师采用。这项研究将使更广泛的社区了解可视化对未来计算机科学家开发的代码质量产生积极影响的潜力。VACCS工具和教育材料，包括教程、讲座、项目和安全软件开发教学的大量实例，将向学术计算界传播。此外，该项目将教授学生如何使用VACCS进行软件安全审计，并将培训研究生教授计算机安全的艺术。

The proposed project will develop Visualization and Analysis of C Code Security (VACCS) tool to assist students with learning secure code programming. The proposal addresses the critical issue of learning secure coding through the development of a system for analyzing and visualizing C code and associated learning materials. VACCS will utilize static and dynamic program analysis to detect security vulnerabilities and warn programmers about the potential errors in their code. The research team has a significant experience in using visualization to teach computer science in such areas as parallel computing, geometric modeling and data encryption. The project will develop visualization and animation of common security vulnerabilities that can be customized for programmers with different level of programming experience. The project will evaluate the effectiveness of VACCS and instructional materials to improve students' learning of secure coding.The outcomes of this research will provide a better understanding of the visualization impact on secure programming instruction within a computing curriculum, as well as a deployable VACCS tool for faculty to adopt. This research will inform the broader community on the visualization potential for positive effects on the quality of code developed by future computer scientists. The VACCS tool and educational materials including tutorials, lectures, projects and extensive examples of teaching secure software development will be disseminated to academic computing community. In addition, this project will teach students how to perform software security audits using VACCS and will train graduate students in the art of teaching computer security.