Teaching the security mindset with reference monitors

SIGCSE 2014 - Proceedings of the 45th ACM Technical Symposium on Computer Science Education

Volumn , Issue , 2014, Pages 523-528

  Cappos, Justin ^a   Weiss, Richard ^b  

^a POLYTECHNIC UNIVERSITY   (United States)

^b EVERGREEN STATE COLLEGE   (United States)

Author keywords

Access control; Python; Reference monitor; Security

Indexed keywords

ACCESS CONTROL; COMPUTER SOFTWARE; DECENTRALIZED CONTROL; GRADING; HIGH LEVEL LANGUAGES; SECURITY SYSTEMS;

BACK-GROUND KNOWLEDGE; PYTHON; REFERENCE MONITORS; RESEARCH UNIVERSITIES; SECURITY; SECURITY ASSIGNMENTS; SECURITY PROPERTIES; WEB APPLICATION;

STUDENTS;

EID: 84899741567     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2538862.2538939     Document Type: Conference Paper

References (24)

1. ACM SIGCOMM Educational Resources. http://edusigcomm.info.ucl.ac.be/.
2. J. Cappos, I. Beschastnikh, A. Krishnamurthy, and T. Anderson. Seattle: A platform for educational cloud computing. SIGCSE Bull., 41(1):111-115, 2009.
3. J. Cappos, A. Dadgar, J. Rasley, J. Samuel, I. Beschastnikh, C. Barsan, A. Krishnamurthy, and T. Anderson. Retaining Sandbox Containment Despite Bugs in Privileged Memory-Safe Code. In The 17th ACM Conference on Computer and Communications Security (CCS '10). ACM, 2010.
4. Csaw summer research and training for college faculty. http://www.poly.edu/events/2013/07/08/csaw-summer-research-and-training-college- faculty.
5. T. Denning, T. Kohno, and A. Shostack. Control-alt-hack: A card game for computer security outreach and education (abstract only). In Proceeding of the 44th ACM technical symposium on Computer science education, SIGCSE '13, pages 729-729, New York, NY, USA, 2013. ACM.
6. W. Du and R. Wang. Seed: A suite of instructional laboratories for computer security education. Journal on Educational Resources in Computing (JERIC), 8(1):3, 2008.
7. Educational Portal -Seattle - Trac. https://seattle.poly.edu/wiki/ EducationalPortal.
8. EDURange Description. http://blogs.evergreen.edu/edurange.
9. Google Gruyere Home. http://google-gruyere.appspot.com/.
10. J. F. Kurose and K. W. Ross. Computer Networking: A Top-Down Approach Featuring the Internet. Pearson/Addison-Wesley, 2005.
11. J. Mirkovic, T. Benzel, T. Faber, R. Braden, J. Wroclawski, and S. Schwab. The deter project: Advancing the science of cyber security experimentation and test. In Technologies for Homeland Security (HST), 2010 IEEE International Conference on, pages 1-7, 2010.
12. Monzur Muhammad and Justin Cappos. Towards a Representive Testbed: Harnessing Volunteers for Networks Research. In The First GENI Research and Educational Workshop, GENI'12, 2012.
13. K. Nance, B. Taylor, R. Dodge, and B. Hay. Creating shareable security modules. In Information Assurance and Security Education and Training, pages 156-163. Springer, 2013.
14. Main Page - NW-DCSD. http://ai.vancouver.wsu.edu/~nwdcsd/wiki/index.php/ Main-Page.
15. Attacking a reference monitor that implements access control. https://seattle.poly.edu/wiki/EducationalAssignments/SecurityLayerPartTwo.
16. Attacking private write. https://seattle.poly.edu/wiki/ EducationalAssignments/PrivateWritePartOne.
17. Building a reference monitor that implements access control. https://seattle.poly.edu/wiki/EducationalAssignments/SecurityLayerPartOne.
18. Building a reference monitor that implements private write. https://seattle.poly.edu/wiki/EducationalAssignments/PrivateWritePartOne.
19. Seattle. https://seattle.poly.edu/.
20. B. Taylor and S. Kaza. Security injections: modules to help students remember, understand, and apply secure coding techniques. In Proceedings of the 16th annual joint conference on Innovation and technology in computer science education, pages 3-7. ACM, 2011.
21. M. Thompson and C. Irvine. Active learning with the cyberciege video game. In Proceedings of the 4th conference on Cyber security experimentation and test, pages 10-10. USENIX Association, 2011.
22. OWASP Webgoat Project. http://www.owasp.org/index.php/Category:OWASP- WebGoat-Project.
23. K. Williams. Firesim Project. http://williams.comp.ncat.edu/firesim.
24. Yanyan Zhuang and Albert Rafetseder and Justin Cappos. Experience with Seattle: A Community Platform for Research and Education. In The Second GENI Research and Educational Workshop, GREE'13, 2013.