| Title: |
Integrating Formal Methods for Security in Software Security Education |
| Language: |
English |
| Authors: |
Modesti, Paolo |
| Source: |
Informatics in Education. 2020 19(3):425-454. |
| Availability: |
Vilnius University Institute of Mathematics and Informatics, Lithuanian Academy of Sciences. Akademjos str. 4, Vilnius LT 08663 Lithuania. Tel: +37-5-21-09300; Fax: +37-5-27-29209; e-mail: info@mii.vu.lt; Web site: https://infedu.vu.lt/journal/INFEDU |
| Peer Reviewed: |
Y |
| Page Count: |
30 |
| Publication Date: |
2020 |
| Document Type: |
Journal Articles; Reports - Descriptive |
| Descriptors: |
Computer Security; Computer Software; Computer Science Education; Programming; Skill Development; Constructivism (Learning) |
| ISSN: |
1648-5831 |
| Abstract: |
As the number of software vulnerabilities discovered increases, the industry is facing difficulties to find specialists to cover the vacancies for security software developers. Considering relevant teaching and learning theories, along with existing approaches in software security education, we present the pedagogic rationale and the concrete implementation of a course on security protocol development that integrates formal methods for security research into the teaching practice. A novelty of the framework is the adoption of a conceptual model aligned with the level of abstraction used for the symbolic (high-level) representation of cryptographic and communication primitives. This is aimed not only at improving skills in secure software development, but also at bridging the gap between the formal representation and the actual implementation, making formal methods and tools more accessible to students and practitioners. |
| Abstractor: |
As Provided |
| Entry Date: |
2020 |
| Accession Number: |
EJ1267761 |
| Database: |
ERIC |