Moving beyond security tracks: integrating security in cs0 and cs1

Authors:
Blair Taylor;Shiva Azadegan
Affiliations:
Towson University, Towson, MD, USA;Towson University, Towson, MD, USA
Venue:
Proceedings of the 39th SIGCSE technical symposium on Computer science education
Year:
2008

Citing 11
Cited 12

Application of security tot he computing science classroom

Proceedings of the thirty-first SIGCSE technical symposium on Computer science education
Writing Secure Code

Writing Secure Code
Integrating Security into the Curriculum

Computer
Teaching Students to Design Secure Systems

IEEE Security and Privacy
Secure Coding: Principles and Practices

Secure Coding: Principles and Practices
Software Security Checklist for the Software Life Cycle

WETICE '03 Proceedings of the Twelfth International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises
Exploiting Software: How to Break Code

Exploiting Software: How to Break Code
Teaching Secure Programming

IEEE Security and Privacy
Foundations for Security Aware Software Development Education

HICSS '06 Proceedings of the 39th Annual Hawaii International Conference on System Sciences - Volume 09
Secure Coding in C and C++: Of Strings and Integers

IEEE Security and Privacy
Threading secure coding principles and risk analysis into the undergraduate computer science and information systems curriculum

InfoSecCD '06 Proceedings of the 3rd annual conference on Information security curriculum development

Security testing: mind the knowledge gap

ACM SIGCSE Bulletin
Enhancing the social issues components in our computing curriculum: computing for the social good

ACM Inroads
Expanding security awareness in introductory computer science courses

2009 Information Security Curriculum Development Conference
Security in computer literacy: a model for design, dissemination, and assessment

Proceedings of the 42nd ACM technical symposium on Computer science education
Enhancing the Social Issues Components in our Computing Curriculum: Computing for the Social Good

Proceedings of the 2010 ITiCSE working group reports
Security injections: modules to help students remember, understand, and apply secure coding techniques

Proceedings of the 16th annual joint conference on Innovation and technology in computer science education
Embedding security into visual programming courses

Proceedings of the 2011 Information Security Curriculum Development Conference
Successful implementation of an active learning laboratory in computer science

Proceedings of the 39th annual ACM SIGUCCS conference on User services
ASIDE: IDE support for web application security

Proceedings of the 27th Annual Computer Security Applications Conference
Interactive support for secure programming education

Proceeding of the 44th ACM technical symposium on Computer science education
Security teaching modules for computer science courses

Journal of Computing Sciences in Colleges
Toward software assurance: infusing a threat modeling methodology into beginning level programming courses

Journal of Computing Sciences in Colleges

Quantified Score

Hi-index	0.00

Visualization

Abstract

In response to the national computer security crisis, colleges and universities have developed security tracks and specialized security courses. While security tracks are effective at producing security experts, they only reach a small subset of students and occur after students have established a foundation of coding techniques. Most undergraduate computing students learn programming and design with little regard to security issues. To complement our security track and reach all computing students at the beginning of their studies, we piloted security integration across sections of CS0 and CS1, using a series of security laboratory modules. Preliminary results show increased security knowledge in the security-targeted sections. This paper describes the details and results of this pilot, which serves as a model for further integration throughout the CS curriculum.