Collaborative Research: Towards Engaged, Personalized and Transferable Learning of Secure Programming by Leveraging Real-World Security Vulnerabilities

协作研究：利用现实世界的安全漏洞实现安全编程的参与式、个性化和可转移学习

• 批准号: 2235224
• 负责人: Kostadin Damevski
• 金额: $ 30万
• 依托单位: Virginia Commonwealth University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-02-01 至 2026-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2235224&HistoricalAwards=false
• 关键词: Collaborative; Research; Towards; Engaged; Personalized

This project aims to serve the national interest by building personalized secure programming projects motivated by real world security vulnerabilities. A number of educators have introduced concepts in secure programming into a series of introductory computer science courses. Students, however, still have difficulty in applying knowledge to new programming tasks in real world scenarios. Students may either have low intrinsic motivations or have few practical examples so that there is limited transfer of skills and competencies across tasks. The proposed project intends to provide additional opportunities for continued learning and real-world applications of secure programming. The project has the potential to prepare a capable workforce with strong secure programming skills. The project would potentially contribute to a competent workforce to safeguard the nation's information technology infrastructure. The project team plans to conduct three activities: 1) mapping between secure programming topics in the curriculum and categories of real-world vulnerabilities, 2) building easy-to-use learning projects from selected real-world vulnerabilities, and 3) developing a personalized project delivery mechanism based on different task contexts. The proposed work intends to establish a learner-centered competency-based model for secure programming and to build a supporting community of learners, educators, and researchers. The project results will be disseminated on the project website, and through computing related conferences, open-source repositories, and mailing lists. The NSF IUSE: EDU Program supports research and development projects to improve the effectiveness of STEM education for all students. Through its Engaged Student Learning track, the program supports the creation, exploration, and implementation of promising practices and tools.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目旨在通过构建受现实世界安全漏洞驱动的个性化安全编程项目来服务于国家利益。许多教育工作者在一系列计算机科学入门课程中引入了安全编程的概念。然而，学生在将知识应用于现实世界场景中的新编程任务方面仍然存在困难。学生的内在动机可能较低，或者很少有实际的例子，因此跨任务的技能和能力转移有限。拟议的项目旨在为安全编程的继续学习和实际应用提供额外的机会。该项目具有培养具有强大安全编程技能的有能力的劳动力的潜力。该项目可能有助于培养有能力的劳动力，以保护国家的信息技术基础设施。项目团队计划开展三项活动：1)在课程中的安全编程主题与现实世界的漏洞类别之间进行映射；2)根据选定的现实世界的漏洞构建易于使用的学习项目；3)根据不同的任务上下文开发个性化的项目交付机制。建议的工作旨在建立一个以学习者为中心的基于能力的安全编程模型，并建立一个由学习者、教育者和研究人员组成的支持性社区。项目结果将在项目网站、计算相关会议、开源存储库和邮件列表上发布。NSF IUSE: EDU项目支持研究和开发项目，以提高所有学生STEM教育的有效性。通过其参与学生学习轨道，该计划支持有前途的实践和工具的创建，探索和实施。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。