Collaborative: Development and Testing of a Secure Programming Clinic

这一能力建设项目将创建安全编程诊所，以加强学生在编写健壮、安全的软件方面的学习和专业知识，类似于英语系或法学院的写作诊所。在学生的整个本科课程中，它提供了不断加强的机制、方法、技术和编程需求，并考虑到安全性和健壮性。诊所将增加课程，而不是取代课程或课程内容。该诊所可以量身定做，以满足特定群体的需求，例如初学者或特定班级的学生。学生在毕业后可能会保留和使用其中的一些技能，从而提高软件的整体质量。此外，评估初始学习、抽象、反馈和元认知对迁移的影响的评估工具的开发将对计算机科学教育研究者做出有价值的贡献。NSF的CyberCorps®SFS计划为解决网络安全教育和劳动力发展的项目提供资金。奖学金项目提供资金，为网络安全专业的学生提供奖学金。作为奖学金的回报，获奖者毕业后将在联邦、州、地方或部落政府组织中与网络安全有关的职位工作一段相当于奖学金期限的时间。能力轨道寻求创新建议，以提高美国高等教育企业培养网络安全专业人员的能力。该项目将通过开发和验证反映学习者编写健壮、安全软件能力的措施来测试诊所的有效性。该诊所将通过几种不同的方式收集数据，并使用这些数据来评估每一家特定的诊所。诊所程序、教学单元和措施将向教育界传播。该项目将学习研究与其他学科，特别是人文科学中使用的方法结合起来，事实证明，这些方法在加强现有课程以加强基本技能方面取得了成功。在此基础上，安全编程诊所寻求在一个横跨编程的许多方面的领域建立和评估专业知识。该项目进一步研究了如何传递这些信息和实践；如何构建信息框架，以便不同编程经验和技能的学生可以从中受益；以及如何使用评估结果来调整临床和材料。

This capacity building project will create Secure Programming Clinic to enhance student learning and expertise in writing robust, secure software, analogous to a writing clinic in an English department or law school. It provides continual reinforcement of the mechanisms, methods, technologies, and need for programming with security and robustness considerations throughout a student's undergraduate coursework. The clinic would augment courses, not replace them or their content. The clinic can be tailored to meet the needs of specific groups, such as beginning students or students in a particular class. The students will likely retain and use some of these skills after they graduated, thereby improving the quality of software overall. In addition, the development of the assessment instruments to evaluate the impact of initial learning, abstraction, feedback, and meta-cognition on transfer will be a valuable contribution to computer science education researchers. The NSF's CyberCorps® SFS program funds projects that address cybersecurity education and workforce development. The Scholarship Track provides funding to award scholarships to students in cybersecurity. In return for their scholarships, recipients will work after graduation for a Federal, State, Local, or Tribal Government organization in a position related to cybersecurity for a period equal to the length of the scholarship. The Capacity Track seeks innovative proposals leading to an increase in the ability of the United States higher education enterprise to produce cybersecurity professionals. The project will test the clinic's effectiveness by developing and validating measures that reflect the ability of learners to write robust, secure software. The clinic will be tried in several different ways to gather data, and use that data to evaluate each particular clinic. The clinic procedures, instructional modules and measures will be disseminated to the educational community. This project brings to bear research in learning in conjunction with methods used in other disciplines, particularly the humanities, which have proved successful in augmenting existing courses to provide reinforcement of basic skills. From this grounding, the Secure Programming Clinic seeks to build and assess expertise in an area that spans many aspects of programming. The project further studies how to deliver this information and practice; how to frame the information so students at different levels of programming experience and skill can benefit from them; and how to use the results of the evaluation to tune the clinic and materials.