EDU: Developing a Software Artifact Repository for Software Assurance Education

EDU：开发用于软件保障教育的软件工件存储库

• 批准号: 1522847
• 负责人: Dianxiang Xu
• 金额: $ 30万
• 依托单位: Boise State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2018-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1522847&HistoricalAwards=false
• 关键词: EDU; Developing; Software; Artifact; Repository

This project will develop a software assurance education artifact repository, designed for use across numerous computer science programs and institutions. The repository will help students to obtain a firm understanding of the software assurance process and necessary skills to develop highly assured software. The team will also create instructional materials for effective software artifact use.The project transitions recent software assurance research to education domain including highly effective techniques for finding security defects. Artifacts will represent typical interdependent software assurance activity results in areas such as security requirements analysis, access control policy analysis, threat modeling and verification, and security testing and assessment. Specifically, the proposed repository will include seven types of software artifacts for several carefully selected and widely used open source security-critical software applications: security requirement specifications, security policies, threat models, security test models, security test cases, vulnerability models, and security mutants. The proposed efforts will help with a critical shortage of software assurance workforce and will also raise software security awareness among a broad audience by introducing the topic to high school computer teachers. This will be done in collaboration with an NSF CS10K project preparing 30-40 high school teachers to teach Computer Science Principles courses at regional high schools. The project will collaborate with Florida A&M, Monmouth University and Gannon University. The project will develop a web application enabling public access to artifacts and instructional materials.

这个项目将开发一个软件保证教育工件存储库，设计用于跨越许多计算机科学程序和机构。该存储库将帮助学生获得对软件保证过程的坚定理解，以及开发高度可靠的软件所需的技能。团队还将为有效地使用软件工件创建指导性材料。该项目将最近的软件保证研究转移到教育领域，包括用于发现安全缺陷的高效技术。工件将在诸如安全需求分析、访问控制策略分析、威胁建模和验证以及安全测试和评估等领域中代表典型的相互依赖的软件保证活动结果。具体地说，建议的存储库将包括7种类型的软件工件，用于几个精心选择和广泛使用的开源安全关键软件应用程序：安全需求规范、安全策略、威胁模型、安全测试模型、安全测试用例、漏洞模型和安全突变体。提议的努力将有助于解决软件保障劳动力严重短缺的问题，并通过向高中计算机教师介绍这一主题，提高广大受众的软件安全意识。这将与NSF CS10K项目合作完成，准备30-40名高中教师在地区高中教授计算机科学原理课程。该项目将与佛罗里达农工大学、蒙茅斯大学和甘农大学合作。该项目将开发一个网络应用程序，使公众能够访问工件和教学材料。