Using the Workflow Technology in Secure Software Engineering Education

Author:
India Waddell, Nadia Jones, Crystal Steed, Xiaohong Yuan, Yaohang Li
File Size:
589.76 kB
Date:
01 July 2010
Downloads:
925 x

Security has become an increasingly important topic in software engineering. In this paper, an approach of using the workflow technology in teaching secure software engineering courses is presented. This approach can free students from low level tools manipulation and command line interactions so that students can focus on learning the important secure software principles. Four case studies using the workflow technology, including using a local static analysis tool for code review, using a remote tool for code analysis, integrating local and remote tools, and implementing a web service fuzzer for penetration tests, are presented. Our educational practice has shown that the benefits of using the workflow technology in teaching secure software engineering classes have been well received by the students.

Using the Workflow Technology in Secure Software Engineering Education