REU Site: Software Security

标题：REU网站：软件安全这个项目为博伊西州立大学的10名本科生提供了一个为期9周的暑期项目，以获得软件安全方面的研究经验。在暑期项目期间，每个学生都要与一名教师导师一起进行精心设计的研究项目。招生工作的重点是来自研究机会有限或没有网络安全项目的群体和学术机构的学生。至少50%的参与者是从其他学术机构挑选出来的。这个项目的学术价值在于，研究经验激励本科生攻读国家重点领域软件安全的研究生课程，学生在新兴的软件安全领域做出创新贡献，推进知识库。更广泛的意义和重要性是，该项目允许来自代表性不足的群体和研究机会有限的大学的不同积极性的学生池获得软件安全方面的研究经验。学习如何做研究、撰写和展示研究成果的过程，为学生未来的学习领域做好了更好的准备。该网站专注于软件安全的关键领域，这是一个几乎没有训练有素的专家的领域，通过培训合格的学生来满足国家的迫切需求。在教师导师的监督下，学生从事与各种软件安全问题相关的研究项目。示例项目包括强制性基于属性的访问控制的保证、基于属性的访问控制策略的自动调试、软件定义的网络应用程序的安全开发以及用于检测软件漏洞的高效符号执行。

Title: REU Site: Software SecurityThis project offers a nine-week summer program for 10 undergraduate students to gain research experience in software security at Boise State University. During the summer program, each student works with a faculty mentor on a carefully designed research project. The recruiting effort focuses on students from underrepresented groups and academic institutions with limited research opportunities or without cybersecurity programs. At least 50% participants are selected from other academic institutions. The intellectual merits of this project are that the research experiences motivate undergraduate students to purse graduate studies in software security, an area of national priority, and that students make innovative contributions and advance the knowledge base in emerging areas of software security. The broader significance and importance is that this project allows a diverse pool of motivated students from underrepresented groups and universities with limited research opportunities to gain research experiences in software security. The process of learning how to do research, write up and present research results, better prepares students for their future field of study. By focusing on the critical area of software security, an area in which there are few trained experts, the site addresses a pressing national need by training qualified students.Under the supervision of faculty mentors, the students work on research projects related to various software security issues. Sample projects are assurance of obligatory attribute-based access control, automated debugging of attribute-based access control policies, secure development of software-defined networking applications, and efficient symbolic execution for detection of software vulnerability.