Work in Progress: Towards an Academic Secure Software Engineering Curriculum for Engineers

Jahn, Sabrina; Mottok, Jürgen

doi:10.1109/educon45650.2020.9125210

Cited by 1 publication

(4 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Irvine et al [16] have suggested that integrating security into existing programs is more effective than treating it separately. Program management should find a reasonable way to include security topics without overloading students with additional learning content or increasing the complexity of lectures [17]. To achieve this, the above recommendations could be covered in assignments, mini projects, extra work, or include them within larger course offerings.…”

Section: How Can Program Managers Apply Recommendations?mentioning

confidence: 99%

“…IT security is an umbrella term for many different disciplines. For example, Information Security, Software Security, Cyber Security, and many more [17]. software and systems security in universities # 4, 5, 10, 11, and 12 (shown in Table 4) is a narrower term than the term cybersecurity .…”

Section: Observations and Recommendations (Rq3)mentioning

confidence: 99%

“…They provided some recommendations for the academic program managers. Jahn & Mottok [17] used inductive teaching and learning to integrate security concepts into the software engineering education of noncomputer science students. They mapped some preconceptions with corresponding learning topics and suitable inductive teaching methods to build new lecture and question units.…”

Section: Introductionmentioning

confidence: 99%

“…In conclusion, most available works have not given course content much attention compared with other aspects of software security education, such as focusing on the security of coding [18,32] or the importance of software security in academic programs [20,38]. Some researchers discussed the integration of software security with other courses [17,37]. Others investigated the impact of teaching software security on the student's level through a MOOC-based course [33] or the effect of culture on cybersecurity training programs [21].…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

What topics should or should not be included in software security education—Qualitative content analysis

Ebad

2022

Comp Applic In Engineering

View full text Add to dashboard Cite

Software security education is still not preparing students for the types of high‐skilled technical roles that represent the most severe workforce shortage. Recognizing this, academia has begun redefining the knowledge area concepts of software security curricula to meet the current workforce shortage. This article studies the software security courses in Arab Gulf academic programs and benchmarks their descriptions with the corresponding knowledge area from cybersecurity Curricula (CSEC). 2017, the first set of global cybersecurity curricular guidelines. Using content analysis, six concepts or essentials are investigated: security requirements, secure design principles, secure source code, analysis and testing, patch, and ethics. It was found that no course follows all the CSEC. 2017 essentials. The analysis and testing essential were considered by all courses, and security after deployment, including the patch essential, needs more attention because it was not included in any course. Similarly, the security requirements and ethics essentials were also considered by a few courses. However, software success depends on requirements, and ethics has become critical in the cybersecurity and information assurance fields that depend on law and forensics. The secure source code essential was covered by most courses. The well‐known types of code attacks were covered, and over half of the courses discussed secure design principles essential. However, security by design is an emerging development philosophy. The article discussed observations and recommendations that will assist program managers and their staff in making effective decisions about the essentials and concepts that should be included when they are developing the software security curriculum.

show abstract

Section: How Can Program Managers Apply Recommendations?mentioning

confidence: 99%

Section: Observations and Recommendations (Rq3)mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%