Threading secure coding principles and risk analysis into the undergraduate computer science and information systems curriculum
Blair Taylor, Shiva Azadegan · 2006
Most computer security issues can be attributed to software vulnerabilities. The number of software vulnerabilities continues to increase. Building secure systems requires incorporating security principles early and throughout the software development life cycle. Education of current and future software developers must include secure coding and design principles. Towson University, as a designated National Center of Academic Excellence in Information Security and Assurance Education, presents the ideal platform for a "security across the curriculum" effort. To supplement our undergraduate security track for computer science majors, we propose threading security touchpoints and risk analysis into the core courses and a subset of follow-up courses. This plan includes sample labs to enforce secure coding mantras, a black hat/white hat approach for identifying and mitigating risks, and evaluation and assessment using checklists and scorecards.