EDU: Deploying and Evaluating Secure Programming Education in the IDE

许多研究人员主张将安全编程教学整合到整个计算课程中，但研究如何成功做到这一点的努力相对较少。这项拟议的研究通过关注高级计算学生和课程，对先前的项目进行了扩展。拟议的活动包括扩展ESIDE工具的实施以支持更广泛的安全指南和代码，在工具中提供更多的教学材料的情景，以及为采用该工具的教师开发材料和实践。初步研究表明，ESIDE可以潜在地提供更多的安全编程意识和知识。主要目标是调查ESIDE是否可以提高学生的安全编程意识、知识和实践。该项目还将研究在高级计算课程中成功使用和学习ESIDE的激励措施、课程结构和教师支持。通过多项部署研究，该项目将收集学生态度、学习和行为的衡量标准，以及影响ESIDE使用的课程和教师衡量标准。这项研究的结果将提供对计算课程中安全编程教学整合的更好理解，以及供教师采用的可部署工具。通过在拟议研究中部署ESIDE，该项目将直接影响不同机构至少8门计算机课程的学生，包括HBCU。这项研究将使更广泛的社区了解综合学习安全实践的可能性，以及促进这一学习的具体工具设计和课程实践。由此产生的工具和教育材料可以被教职员工和教育工作者采用或扩展。该项目将通过以下方式传播ESIDE工具：将其作为开放源码项目发布；在教育和安全场所发布；与一本受欢迎的Java教科书的作者合作，将该工具纳入未来版本。

A number of researchers have advocated that secure programming instruction be integrated across a computing curriculum but there have been relatively few efforts examining how to successfully do so. The proposed research expands upon a previous project by focusing on advanced computing students and courses. The proposed activities include expanding ESIDE tool implementation to support a broader range of security guidelines and code, providing increased contextualization of the instructional materials within the tool, and developing materials and practices for faculty adopting the tool.The preliminary research demonstrated that ESIDE can potentially provide greater awareness and knowledge of secure programming. The primary goal is to investigate whether ESIDE can increase students' awareness, knowledge, and practice of secure programming. The project will also examine the incentives, course structures, and faculty support that enable successful use and learning with ESIDE within advanced computing courses. Through multiple deployment studies, the project will gather measures of student attitudes, learning, and behaviors, as well as course and faculty measures that impact ESIDE use.The outcomes of this research will provide a better understanding of the integration of secure programming instruction within a computing curriculum, as well as a deployable tool for faculty to adopt. Through the deployment of ESIDE in the proposed research, the project will directly impact students in at least 8 computing courses at different institutions, including a HBCU. This research will inform the broader community on the potential for integrated learning of security practices, and the specific tool design and course practices that facilitate that learning. The resulting tool and educational materials can then be adopted or expanded by faculty and educators. The project will disseminate the ESIDE tool by releasing it as an open source project; publishing at education and security venues; and working with an author of a popular Java textbook to include the tool in future editions.