A practical application of software security in an undergraduate software engineering course
نویسنده
چکیده
Computer software is developed according to software engineering methodologies. However, as more of the economy and our social lives move online, software security has become a topic of increasing importance. Traditionally, courses in software security are offered at the graduate level or in a stand-alone course at the undergraduate level, with many undergraduate students being required to apply security principles to their software development processes as soon as they complete their degrees. Therefore, this paper posits that software security can be effectively introduced to undergraduate students in a traditionally taught software engineering course. The paper presents a modified software engineering course which introduces the secure development life cycle. Several traditional software development methodologies are presented which provide a foundation for introducing secure software principles. Additionally, the paper introduces collaborative learning and service-learning which are used in the practical application of software security concepts. Lastly, challenges and future work are presented.
منابع مشابه
Teaching an Object-Oriented Software Development Lifecycle in Undergraduate Software Engineering Education
In some cases, real-world application of software engineering concepts does not effectively map with current undergraduate curriculums. Typically, a student’s first “handson” experience working on large-scale software development projects is via an intern position or their first full-time position. However, prior exposure to the corporate project environment would greatly improve a student’s pe...
متن کاملA student-enacted simulation approach to software engineering education
In some cases, real-world application of software engineering concepts does not effectively map with current undergraduate curriculums. Typically, a student’s first “hands-on” experience working on large-scale software development projects is via an intern position or his/her first full-time position. However, prior exposure to the corporate project environment would greatly improve a student’s...
متن کاملCourse Modules for Software Security
Each year the reported number of security vulnerabilities increases as does the sophistication of attacks to exploit these vulnerabilities. Most security vulnerabilities are the result of insecure coding practices. There is a critical need to increase the security education of computer science students, particularly in software security. We are designing course modules, to be used at the underg...
متن کاملSoftware Assignments for a Course in Secure E-Commerce
This paper describes a course in computer security for advanced undergraduate students in computer science and software engineering. The aim of the course is to give the student a thorough grounding in the principles and practice of cryptography and secure network protocols, and in the application of these to the development of e-commerce applications. An important part of the learning process ...
متن کاملDesign, implementation and evaluation of end-of-course skills of undergraduate students in environmental health engineering using Objective Structured in field Examination (OSFE): An action research study
Introduction: Evaluation is an integral part of educational programs and Undoubtedly, for conducting appropriate evaluation Students should be evaluated in simulated conditions of the future workplace. The purpose of this study is to design, implement and evaluate an objective structured practical test to assess the practical capabilities of environmental health engineering students at Yasuj co...
متن کامل