Collaborative Research: Towards Engaged, Personalized and Transferable Learning of Secure Programming by Leveraging Real-World Security Vulnerabilities

协作研究：利用现实世界的安全漏洞实现安全编程的参与式、个性化和可转移学习

• 批准号: 2235224
• 负责人: Kostadin Damevski
• 金额: $ 30万
• 依托单位: Virginia Commonwealth University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-02-01 至 2026-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2235224&HistoricalAwards=false
• 关键词: Collaborative; Research; Towards; Engaged; Personalized

This project aims to serve the national interest by building personalized secure programming projects motivated by real world security vulnerabilities. A number of educators have introduced concepts in secure programming into a series of introductory computer science courses. Students, however, still have difficulty in applying knowledge to new programming tasks in real world scenarios. Students may either have low intrinsic motivations or have few practical examples so that there is limited transfer of skills and competencies across tasks. The proposed project intends to provide additional opportunities for continued learning and real-world applications of secure programming. The project has the potential to prepare a capable workforce with strong secure programming skills. The project would potentially contribute to a competent workforce to safeguard the nation's information technology infrastructure. The project team plans to conduct three activities: 1) mapping between secure programming topics in the curriculum and categories of real-world vulnerabilities, 2) building easy-to-use learning projects from selected real-world vulnerabilities, and 3) developing a personalized project delivery mechanism based on different task contexts. The proposed work intends to establish a learner-centered competency-based model for secure programming and to build a supporting community of learners, educators, and researchers. The project results will be disseminated on the project website, and through computing related conferences, open-source repositories, and mailing lists. The NSF IUSE: EDU Program supports research and development projects to improve the effectiveness of STEM education for all students. Through its Engaged Student Learning track, the program supports the creation, exploration, and implementation of promising practices and tools.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目旨在通过建立由现实世界安全漏洞促进的个性化安全编程项目来服务国家利益。许多教育工作者已将安全编程的概念引入了一系列入门计算机科学课程中。但是，学生仍然很难将知识应用于现实世界中的新编程任务。学生可能要么具有较低的内在动机，要么几乎没有实践示例，因此跨任务的技能和能力的转移有限。拟议的项目旨在为持续学习和现实世界的安全编程应用提供更多机会。该项目有可能准备具有强大安全编程技能的能力劳动力。该项目有可能有助于一支有能力的劳动力，以保护美国信息技术基础设施。该项目团队计划进行三个活动：1）在课程中的安全编程主题和现实世界漏洞类别之间映射，2）从选定的现实世界中的漏洞中构建易于使用的学习项目，以及3）基于不同任务上下文的个性化项目交付机制。拟议的工作旨在建立一个以学习者为中心的能力模型，以确保安全编程，并建立一个支持学习者，教育工作者和研究人员的支持社区。项目结果将在项目网站上传播，并通过计算相关的会议，开源存储库和邮件列表进行传播。 NSF IUSE：EDU计划支持研发项目，以提高所有学生STEM教育的有效性。通过其参与的学生学习轨道，该计划支持了有前途的实践和工具的创建，探索和实施。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛的影响评估的评估来支持的。