PatternCoder

Paterson, James H.; Cheng, K.; Haddow, John

doi:10.1145/1594399.1594401

Cited by 2 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is understandable as students are motivated to complete the requirements of their coding activities because successful completion is typically rewarded with higher assignment and exam grades. Previous researchers required students to attend a security clinic (for example, Belcher, Bishop, Dark, & Ngambeki, 2015;Bishop, 2010). However, we did not wish to require the use of our tool but instead examine whether minimal secure coding requirements on a weeklong assignment would influence the coding process and the students' awareness.…”

Section: Motivation: Incentives For Secure Codingmentioning

confidence: 99%

See 1 more Smart Citation

Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE

Whitney

Lipford

Chu

et al. 2017

Journal of Educational Computing Research

View full text Add to dashboard Cite

Many of the software security vulnerabilities that people face today can be remediated through secure coding practices. A critical step toward the practice of secure coding is ensuring that our computing students are educated on these practices. We argue that secure coding education needs to be included across a computing curriculum. We are examining an approach that complements traditional classroom instruction by turning the student's integrated development environment into an educational resource for secure coding instruction. In this article, we report on two formative and one summative study using our tool Educational Security in the Integrated Development Environment (ESIDE) in early and intermediate computer science programming courses. Our results support the viability of this approach to increase secure programming knowledge and awareness of students and also to identify several challenges for maximizing the learning opportunities within programming courses.

show abstract

Section: Motivation: Incentives For Secure Codingmentioning

confidence: 99%

“…Secure coding is the practice of writing code in a manner that minimizes software security vulnerabilities. There exists a large body of knowledge on techniques for writing secure code (OWASP Foundation, 2015b, 2016a. However, these techniques are rarely a fundamental component of a computing curriculum.…”

mentioning

confidence: 99%

Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE

Whitney

Lipford

Chu

et al. 2017

Journal of Educational Computing Research

View full text Add to dashboard Cite

show abstract

Using UML Modeling to Facilitate Three-Tier Architecture Projects in Software Engineering Courses

Mitra

2014

ACM Trans. Comput. Educ.

View full text Add to dashboard Cite

This article presents the use of a model-centric approach to facilitate software development projects conforming to the three-tier architecture in undergraduate software engineering courses. Many instructors intend that such projects create software applications for use by real-world customers. While it is important that the first version of these applications satisfy the customer by providing the functionality the customer expects and perform reliably and efficiently, it is equally important to be able to accommodate the customer's change requests over the period of the product's lifetime. The challenges in achieving these goals include the lack of real-world software development experience among the student developers and the fact that postdeployment change requests will almost certainly have to be handled by students who are not among the original developers. In this article, we describe how a model-centric approach using UML has been effective in enabling students to develop and maintain eight software applications for small businesses over a 9-year period. We discuss the characteristics of our modeling technique, which include the application of modeling patterns and quality check rules that enable students to create a model that can be clearly and consistently mapped to code. We also describe the nature of these mapping-to-code techniques, emphasizing how they reduce coupling among the implementation's classes. We then discuss our experiences in the classroom with these techniques, focusing on how we have improved our teaching over the years based on the analysis of student performance and feedback. Finally, we compare our approach to related work teaching modeling and the development and maintenance of code in software engineering courses with both extensive and minimal modeling.

show abstract

PatternCoder

Cited by 2 publications

References 17 publications

Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE

Embedding Secure Coding Instruction Into the IDE: Complementing Early and Intermediate CS Courses With ESIDE

Using UML Modeling to Facilitate Three-Tier Architecture Projects in Software Engineering Courses

Contact Info

Product

Resources

About