EDU:Collaborative: VACCS - Visualization and Analysis for C Code Security

EDU：协作：VACCS - C 代码安全性的可视化和分析

• 批准号: 1522883
• 负责人: Steven Carr
• 金额: $ 16.96万
• 依托单位: Western Michigan University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1522883&HistoricalAwards=false
• 关键词: EDU; Collaborative; VACCS; Visualization; Analysis

The proposed project will develop Visualization and Analysis of C Code Security (VACCS) tool to assist students with learning secure code programming. The proposal addresses the critical issue of learning secure coding through the development of a system for analyzing and visualizing C code and associated learning materials. VACCS will utilize static and dynamic program analysis to detect security vulnerabilities and warn programmers about the potential errors in their code. The research team has a significant experience in using visualization to teach computer science in such areas as parallel computing, geometric modeling and data encryption. The project will develop visualization and animation of common security vulnerabilities that can be customized for programmers with different level of programming experience. The project will evaluate the effectiveness of VACCS and instructional materials to improve students' learning of secure coding.The outcomes of this research will provide a better understanding of the visualization impact on secure programming instruction within a computing curriculum, as well as a deployable VACCS tool for faculty to adopt. This research will inform the broader community on the visualization potential for positive effects on the quality of code developed by future computer scientists. The VACCS tool and educational materials including tutorials, lectures, projects and extensive examples of teaching secure software development will be disseminated to academic computing community. In addition, this project will teach students how to perform software security audits using VACCS and will train graduate students in the art of teaching computer security.

建议的项目将开发C代码安全可视化和分析（VACCS）工具，以帮助学生学习安全代码编程。该提案通过开发用于分析和可视化C代码和相关学习材料的系统来解决学习安全编码的关键问题。VACCS将利用静态和动态程序分析来检测安全漏洞，并警告程序员代码中的潜在错误。该研究团队在使用可视化来教授并行计算、几何建模和数据加密等领域的计算机科学方面拥有丰富的经验。该项目将开发常见安全漏洞的可视化和动画，可以为具有不同编程经验的程序员定制。该项目将评估VACCS和教学材料的有效性，以提高学生的学习安全coding.The研究的结果将提供一个更好的理解可视化的影响，安全编程教学中的计算课程，以及部署VACCS工具，教师采用。这项研究将告知更广泛的社区可视化对未来计算机科学家开发的代码质量产生积极影响的潜力。VACCS工具和教育材料，包括教程，讲座，项目和教学安全软件开发的广泛例子将分发给学术计算社区。此外，这个项目将教学生如何使用VACCS执行软件安全审计，并将培训研究生在计算机安全教学艺术。