EDU:Collaborative: VACCS - Visualization and Analysis for C Code Security

EDU：协作：VACCS - C 代码安全性的可视化和分析

• 批准号: 1523017
• 负责人: Jean Mayo
• 金额: $ 13万
• 依托单位: Michigan Technological University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1523017&HistoricalAwards=false
• 关键词: EDU; Collaborative; VACCS; Visualization; Analysis

The proposed project will develop Visualization and Analysis of C Code Security (VACCS) tool to assist students with learning secure code programming. The proposal addresses the critical issue of learning secure coding through the development of a system for analyzing and visualizing C code and associated learning materials. VACCS will utilize static and dynamic program analysis to detect security vulnerabilities and warn programmers about the potential errors in their code. The research team has a significant experience in using visualization to teach computer science in such areas as parallel computing, geometric modeling and data encryption. The project will develop visualization and animation of common security vulnerabilities that can be customized for programmers with different level of programming experience. The project will evaluate the effectiveness of VACCS and instructional materials to improve students' learning of secure coding.The outcomes of this research will provide a better understanding of the visualization impact on secure programming instruction within a computing curriculum, as well as a deployable VACCS tool for faculty to adopt. This research will inform the broader community on the visualization potential for positive effects on the quality of code developed by future computer scientists. The VACCS tool and educational materials including tutorials, lectures, projects and extensive examples of teaching secure software development will be disseminated to academic computing community. In addition, this project will teach students how to perform software security audits using VACCS and will train graduate students in the art of teaching computer security.

计划将开发C代码安全可视化分析工具（VACCS），协助学生学习安全代码编程。该提案通过开发一个用于分析和可视化C代码和相关学习材料的系统来解决学习安全编码的关键问题。VACCS将利用静态和动态程序分析来检测安全漏洞，并警告程序员他们代码中的潜在错误。该研究团队在并行计算、几何建模和数据加密等领域使用可视化来教授计算机科学方面具有丰富的经验。该项目将开发常见安全漏洞的可视化和动画，可以为具有不同编程经验水平的程序员定制。该项目将评估vacs和教学材料的有效性，以改善学生对安全编码的学习。这项研究的结果将更好地理解可视化对计算机课程中安全编程教学的影响，以及为教师采用可部署的VACCS工具。这项研究将告知更广泛的社区，可视化对未来计算机科学家开发的代码质量有积极影响的潜力。VACCS工具和教育材料，包括教程、讲座、项目和大量教学安全软件开发的例子，将分发给学术计算界。此外，该项目将教学生如何使用VACCS执行软件安全审计，并将培训研究生教授计算机安全的艺术。