Teaching Secure Software Assurance to Undergraduates

Carolyn Lamacchia, Bloomsburg University
Carl J. Chimi, Bloomsburg University

ABSTRACT
Comprehensive security closes all routes of attack found in the network, hosts, access points, application code, and user procedures. Regardless of their technology infrastructure, organizations and government agencies support the security plan by acquiring and maintaining secure software that functions correctly even when confronted with unauthorized, malicious events. Recognizing that poor quality software is a serious and growing problem contributing to security breaches, this research addresses the secure software process and how to teach it to undergraduate technology majors. Secured software architecture, security analysis tools, and Java programming language vulnerabilities are discussed. A vulnerability assignment for students is described and demonstrated. This assignment provides an Information Technology Management, Computer Information Systems, or Computer Science student an opportunity to evaluate program code for possible security issues.

(Return to Program Resources)

Updated 03/19/2014