Introducing secure coding in CS0 and CS1 (abstract only)

ABSTRACT

The CS 2013 curriculum draft includes Information Assurance and Security as a pervasive knowledge area. However, introducing security in CS0 and CS1 is challenging because of lack of appropriate teaching resources and training. This workshop will provide a well-tested strategy for introducing secure coding concepts in CS0 and CS1. We will introduce attendees to secure coding through hands-on exercises, and provide self-contained, lab-based modules designed to be injected into CS0/CS1 with minimal impact on the course (www.towson.edu/securityinjections). Participants will be encouraged to bring in their own syllabus and labs to modify to include secure coding concepts. The first 15 participants will be reimbursed for the workshop cost on attendance. Laptop recommended.

References

1. Taylor, B. and Kaza, S. Security injections: modules to help students remember, understand, and apply secure coding techniques. Proceedings of the 16th Annual Joint Conference on Innovation and Technology in Computer Science Education, ACM (2011), 3--7.
2. Turner, C.F., Taylor, B., and Kaza, S. Security in computer literacy. Proceedings of the 42nd ACM Technical Symposium on Computer Science Education - SIGCSE '11, ACM Press (2011), 15.
3. Bishop, M. Some Secure Programming' Exercises for an Introductory Programming Class, Proceedings of the Seventh World Conference on Information Security Education (July 2009).
4. Bishop, M. and Elliott, C., Robust Programming by Example, Proceedings of the Seventh World Conference on Information Security Education pp. 23--30 (June 2011).

Index Terms

• Social and professional topics

  • Professional topics

    • Computing education

      • Model curricula