EDU: Deploying and Evaluating Secure Programming Education in the IDE

EDU：在 IDE 中部署和评估安全编程教育

• 批准号: 1523041
• 负责人: Heather Lipford
• 金额: $ 29.98万
• 依托单位: University of North Carolina at Charlotte
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2019-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1523041&HistoricalAwards=false
• 关键词: EDU; Deploying; Evaluating; Secure; Programming

A number of researchers have advocated that secure programming instruction be integrated across a computing curriculum but there have been relatively few efforts examining how to successfully do so. The proposed research expands upon a previous project by focusing on advanced computing students and courses. The proposed activities include expanding ESIDE tool implementation to support a broader range of security guidelines and code, providing increased contextualization of the instructional materials within the tool, and developing materials and practices for faculty adopting the tool.The preliminary research demonstrated that ESIDE can potentially provide greater awareness and knowledge of secure programming. The primary goal is to investigate whether ESIDE can increase students' awareness, knowledge, and practice of secure programming. The project will also examine the incentives, course structures, and faculty support that enable successful use and learning with ESIDE within advanced computing courses. Through multiple deployment studies, the project will gather measures of student attitudes, learning, and behaviors, as well as course and faculty measures that impact ESIDE use.The outcomes of this research will provide a better understanding of the integration of secure programming instruction within a computing curriculum, as well as a deployable tool for faculty to adopt. Through the deployment of ESIDE in the proposed research, the project will directly impact students in at least 8 computing courses at different institutions, including a HBCU. This research will inform the broader community on the potential for integrated learning of security practices, and the specific tool design and course practices that facilitate that learning. The resulting tool and educational materials can then be adopted or expanded by faculty and educators. The project will disseminate the ESIDE tool by releasing it as an open source project; publishing at education and security venues; and working with an author of a popular Java textbook to include the tool in future editions.

许多研究人员主张将安全编程教学整合到整个计算课程中，但研究如何成功做到这一点的努力相对较少。拟议的研究扩展了以前的项目，重点是先进的计算学生和课程。拟议的活动包括扩展ESIDE工具的实施，以支持更广泛的安全准则和代码，提供更多的上下文的工具内的教学材料，并制定材料和实践教师采用tool.The初步研究表明，ESIDE可以提供更多的认识和知识的安全编程。主要目标是调查ESIDE是否可以提高学生的安全编程意识，知识和实践。该项目还将研究激励措施，课程结构和教师支持，使成功的使用和学习与ESIDE在先进的计算课程。通过多个部署研究，该项目将收集学生的态度，学习和行为的措施，以及课程和教师的措施，影响ESIDE的使用。这项研究的结果将提供一个更好的理解的集成安全编程教学在计算课程，以及一个可部署的工具，教师采用。通过在拟议研究中部署ESIDE，该项目将直接影响不同机构（包括HBCU）至少8门计算课程的学生。这项研究将向更广泛的社区通报安全实践综合学习的潜力，以及促进这种学习的具体工具设计和课程实践。由此产生的工具和教育材料可以被教师和教育工作者采用或扩展。该项目将通过以下方式传播ESIDE工具：将其作为一个开放源码项目发布;在教育和安全场所发布;与一本流行的Java教科书的作者合作，将该工具纳入未来的版本。