EDU: Developing a Software Artifact Repository for Software Assurance Education

这个项目将开发一个软件保证教育工件库，设计用于众多的计算机科学项目和机构。该库将帮助学生获得软件保证过程和必要的技能，以开发高度保证软件的坚定的理解。该项目将最近的软件保证研究过渡到教育领域，包括发现安全缺陷的高效技术。工件将代表安全需求分析、访问控制策略分析、威胁建模和验证以及安全测试和评估等领域中典型的相互依赖的软件保证活动结果。具体而言，拟议的存储库将包括七种类型的软件工件的几个精心挑选和广泛使用的开源安全关键软件应用程序：安全需求规格，安全策略，威胁模型，安全测试模型，安全测试案例，漏洞模型和安全突变。拟议的努力将有助于解决软件保证劳动力严重短缺的问题，并通过向高中计算机教师介绍这一主题，提高广大受众的软件安全意识。这将与NSF CS10 K项目合作，准备30-40名高中教师在地区高中教授计算机科学原理课程。该项目将与佛罗里达A M、蒙茅斯大学和甘农大学合作。该项目将开发一个网络应用程序，使公众能够访问文物和教学材料。

This project will develop a software assurance education artifact repository, designed for use across numerous computer science programs and institutions. The repository will help students to obtain a firm understanding of the software assurance process and necessary skills to develop highly assured software. The team will also create instructional materials for effective software artifact use.The project transitions recent software assurance research to education domain including highly effective techniques for finding security defects. Artifacts will represent typical interdependent software assurance activity results in areas such as security requirements analysis, access control policy analysis, threat modeling and verification, and security testing and assessment. Specifically, the proposed repository will include seven types of software artifacts for several carefully selected and widely used open source security-critical software applications: security requirement specifications, security policies, threat models, security test models, security test cases, vulnerability models, and security mutants. The proposed efforts will help with a critical shortage of software assurance workforce and will also raise software security awareness among a broad audience by introducing the topic to high school computer teachers. This will be done in collaboration with an NSF CS10K project preparing 30-40 high school teachers to teach Computer Science Principles courses at regional high schools. The project will collaborate with Florida A&M, Monmouth University and Gannon University. The project will develop a web application enabling public access to artifacts and instructional materials.