Threading secure coding principles and risk analysis into the undergraduate computer science and information systems curriculum

Proceedings of the 2006 Information Security Curriculum Development Conference, InfoSecCD '06

Volumn , Issue , 2007, Pages 24-29

  Taylor, Blair ^a   Azadegan, Shiva ^a  

^a TOWSON UNIVERSITY   (United States)

Author keywords

Computer science curriculum; Information security curriculum development; Risk management; Security education

Indexed keywords

COMPUTER SCIENCE; CURRICULA; ENGINEERING EDUCATION; RISK ANALYSIS; RISK MANAGEMENT;

COMPUTER SCIENCE CURRICULUM; INFORMATION SECURITY CURRICULUM DEVELOPMENT; SECURE CODING PRINCIPLES; SECURITY EDUCATION;

SECURITY OF DATA;

EID: 34748873252     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1231047.1231053     Document Type: Conference Paper

References (19)

1. Apvrille and M. Pourzandi. Secure Software Development by Example, IEEE Security & Privacy, 3 (4): 10-17, July/August 2005.
2. Azadegan, S., Lavinie, M., O'Leary, M., Wijesinha, A., and Zimand, M. 2003. A dedicated undergraduate track in computer security education. In Security Education and Critical infrastructures, C. Irvine and H. Armstrong, Eds. Kluwer Academic Publishers, Norwell, MA, 319-331.
3. Azadegan, S., Lavine, M., O'Leary, M., Wijesinha, A., and Zimand, M. 2003. An undergraduate track in computer security. In Proceedings of the 8th Annual Conference on innovation and Technology in Computer Science Education (Thessaloniki, Greece, June 30 - July 02, 2003). D. Finkel, Ed. ITiCSE '03. ACM Press, New York, NY, 207-210.
4. S. Azadegan, M. Lavinine, M. O'Leary, A. Wijesinha, and M. Zimand. Undergraduate Computer Security Education: A Report on our Experiences & Learning. Proceedings of Seventh Workshop on Education in Computer Security (WECS 7), January 2006, Monterey, California.
5. M. Bishop and D. Frincke. Teaching Secure Programming, IEEE Security & Privacy, 2005, 54-56.
6. M. Bishop, D. Frincke. Teaching Robust Programming, IEEE Security & Privacy, 2004, 54-57.
7. CERT/CC. CERT/CC Statistics 1988-2006. http://www.cert.org/stats/ cert_stats.html [May 2006].
8. M Graff, K. van Wyck. Secure Coding: Principles and Practices, O'Reilly, Sebastopol, CA, 2003.
9. G. Hoglund, G. McGraw. Exploiting Software: How to Break Code, Addison-Wesley , Boston, 2004
10. M. Howard and D. LeBlanc. Writing Secure Code, Microsoft Press, Redmund, WA, 2003.
11. C. E. Irvine, S. Chin, and D. Frincke. Integrating Security into the Curriculum, IEEE Computer, Dec. 1998, pp. 25-30.
12. G. McGraw. Software Security: Building Security In, Addison-Wesley , Upper Saddle River, NJ, 2006.
13. Microsoft Corporation. Trustworthy Computing Curriculum 2004 RFP Awards, http://research.microsoft.com/ur/us/fundingopps/TWC CurriculumRFPAwards. aspx#Cornell_University
14. L.F. Perrone, M. Aburdene, and X. Meng. Approaches to undergraduate instruction in computer security, Proceedings of the American Society for Engineering Education Annual Conference and Exhibition, ASEE 2005.
15. President's Information Technology Advisory Committee (PITAC), Cyber Security: A Crisis of Prioritization, National Coordination Office for Information Technology Research and Development, Arlington, VA, http://www.nitrd.gov/pitac/reports/20050301_cybersecurity/cybersecurity.pdf (2005
16. J. Ryan, and D. Ryan. "Institutional and Professional Liability in Information Assurance Education," 2002, www.danjryan.com/ Institutional%20and%20Professional%20 Liability%20in%20Information%20Assurance%20Education.doc
17. J. Saltzer and M. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9), September 1975.
18. F. Swiderski and W.Snyder. Threat Modeling, Microsoft Press, Redmund, WA, 2004.
19. J. Viega and G. McGraw. Building Secure Software, Addison-Wesley, Boston, 2002.