Secure e-Commerce: A Modular Course Supported by Virtual Laboratories

计算机科学（31）该项目建立在现有软件实验室的成功基础上，以支持在先前的NSF奖励（DUE 0127300）下开发的电子商务技术计算机科学课程，通过开发和传播关注电子商务技术关键要素：安全的材料来扩展电子商务教育。这个项目的目标是传播前一个项目的材料，并回应计算机科学领域的一个重大挑战——编写安全软件。之前的项目致力于开发用于训练学生编程电子商务商店组件的材料。这个项目正在开发、测试和改进强调电子商务软件安全需求的教材。pi正在开发协调的讲座材料和支持软件实验室练习（“虚拟实验室”），在以下关键领域：(1)密码学-安全的数学；(2)职业道德——责任感先于知识和授权；(3)检测和防御攻击——黑客技术；(4)无线接入——移动商务的推动者；(5)网络服务——电子商务保安的新途径；(6)身份验证、授权和联合——这些关键的web服务组件促进了不同系统之间的身份管理和信任共享。这种技术方法与许多现有电子商务课程中采用的商业/法律方法明显不同。项目重点领域包括：-安全及安全编码理念、策略、工具和技术；-计算机科学家和哲学家（伦理学家）之间的合作，从而强调职业道德；-六种互动式员工支持的使用和评估：办公时间、电子邮件、NetMeeting、即时通讯、常见问题解答和学生操作的留言板；-在三个夏季为20-25名教师举办“教师教育”讲习班，其中包括来自社区学院、文理学院和科学与工程专业的教师；-在拟议工作的每一个方面征聘妇女和少数民族的精心设计的努力；-强调“在环境中编程”，让学生看到他们的作品的实际应用和社会价值；-提供教职员协助其他学校的教员采用、实施、使用和评估这些教材；多机构进行定性和定量评估，评估这些材料是否以及如何改变了学生的学习成果。

Computer Science (31)This project is building on the success of an existing software laboratory to support a computer science course on Electronic Commerce Technologies developed under a prior NSF award (DUE 0127300) to expand e-commerce education by developing and disseminating materials that focus on a key element of e-commerce technology: security. The goal of this project is disseminate materials from the previous project and to respond to one of the grand challenges in the field of computer science - writing secure software. The prior project was devoted to developing materials to be used in training students to program components of e-commerce stores. This project is developing, testing, and refining teaching materials that emphasize the security requirements of e-commerce software. The PIs are developing coordinated lecture materials and supporting software laboratory exercises ("virtual labs"), in the following critical areas: (1) Cryptography - the mathematics of security; (2) Professional ethics - a sense of responsibility should precede knowledge and empowerment; (3) Detecting and defending against attacks - the technology of hacking; (4) Wireless access - the enabler for mobile commerce; (5) Web services - a new approach to e-commerce security; (6) Authentication, authorization, and federation - the crucial web service components that facilitate identity management and trust sharing among disparate systems. This technical approach differs markedly from the business/legal approach taken in many extant e-commerce courses. Project emphasis areas include: - security and on secure coding philosophies, strategies, tools, and techniques; - collaboration between a computer scientist and philosopher (ethicist) leading to an emphasis on professional ethics; - use and evaluation of six types of interactive staff support: office hours, email, NetMeeting, IM, FAQs, and student-operated message boards; - a "teach-the-teachers" workshop for 20-25 faculty in the three summers, to include faculty from community colleges, liberal arts colleges, and science and engineering programs; - a well-designed effort to recruit women and minorities in every aspect of the proposed work; - an emphasis on "programming in context" in which students can see the practical application and social value of their artifacts; - providing staff to support faculty at other schools with their adoption, implementation, use, and evaluation of these materials; and - a multi-institution qualitative and quantitative evaluation of whether and how these materials changed learning outcomes for the students.