CAREER: Test-Driven Development of Secure and Reliable Software Applications

北卡罗来纳州立大学CAREER：安全可靠的软件应用程序的测试驱动开发我国的关键基础设施要求我们当前和未来的IT专业人员拥有生产可靠和值得信赖的软件的知识、工具和技术。这项研究的目标是扩展、验证和传播软件开发实践，以帮助预防与计算机相关的灾难。该实践基于测试驱动开发(TDD)，这是一种具有紧密的验证和确认反馈循环的软件开发技术。拟议的工作扩展了TDD实践，并提供了一个支持性的开源工具，用于明确地将安全定位为这些紧密反馈循环中考虑的主要属性。此外，该研究还检查了TDD和配对编程/配对测试的组成，将其作为增强安全性和可靠性的开发实践的元组。这项研究还将研究结对编程/结对测试在提高IT员工中面向社会的女性、男性和少数群体的成功/留存方面的潜力。这项提议的学术价值包括加强基于TDD的软件开发实践以减轻安全担忧，以及通过因特网传播的安全测试模式目录。该提案的广泛影响包括举办一场大学间学生竞赛，以激发人们对开发安全可靠的软件应用程序的兴趣，以及修订后的本科软件工程教科书，整合了安全和可靠性主题。

ABSTRACT0346903Laurie WilliamsNorth Carolina State UniversityCAREER: The Test-Driven Development of Secure and Reliable Software ApplicationsOur nation's critical infrastructure demands that our current and future IT professionals have the knowledge, tools, and techniques to produce reliable and trustworthy software. The objective of this research is to extend, validate, and disseminate a software development practice to aid in the prevention of computer-related disasters. The practice is based upon test-driven development (TDD), a software development technique with tight verification and validation feedback loops. The proposed work extends the TDD practice and provides a supportive open-source tool for explicitly situating security as a primary attribute considered in these tight feedback loops. Additionally, the research examines the composition of TDD and pair programming/pair testing as a security- and reliability-enhancing tuple of development practices. The study will also examine the potential of pair programming/pair testing for improving the success/retention of socially-oriented women, men, and minorities in the IT workforce. The intellectual merits of this proposal include an enhanced TDD-based software development practice to mitigate security concerns and a catalog of security testing patterns disseminated via the Internet. The broad impacts of the proposal include an interuniversity student competition to build excitement about developing secure and reliable software applications and a revised undergraduate software engineering textbook integrating security and reliability topics.