Enhancing Secure Coding Assistant System with Design by Contract and Programming Logic

2021 ◽  
pp. 124-140
Author(s):  
Wenhui Liang ◽  
Cui Zhang ◽  
Jun Dai
Keyword(s):  
Design By Contract ◽  
Secure Coding ◽  
Programming Logic

scholarly journals Sifu - a cybersecurity awareness platform with challenge assessment and intelligent coach

Cybersecurity ◽  
2020 ◽  
Vol 3 (1) ◽  
Author(s):  
Tiago Espinha Gasiba ◽  
Ulrike Lechner ◽  
Maria Pinto-Albuquerque
Keyword(s):  
Real Life ◽  
Critical Infrastructures ◽  
Automatic Assessment ◽  
Software Developers ◽  
Software Vulnerabilities ◽  
Secure Coding ◽  
Industrial Software ◽  
Industrial Standards ◽  
Coding Guidelines ◽  
Industrial Context

AbstractSoftware vulnerabilities, when actively exploited by malicious parties, can lead to catastrophic consequences. Proper handling of software vulnerabilities is essential in the industrial context, particularly when the software is deployed in critical infrastructures. Therefore, several industrial standards mandate secure coding guidelines and industrial software developers’ training, as software quality is a significant contributor to secure software. CyberSecurity Challenges (CSC) form a method that combines serious game techniques with cybersecurity and secure coding guidelines to raise secure coding awareness of software developers in the industry. These cybersecurity awareness events have been used with success in industrial environments. However, until now, these coached events took place on-site. In the present work, we briefly introduce cybersecurity challenges and propose a novel platform that allows these events to take place online. The introduced cybersecurity awareness platform, which the authors call Sifu, performs automatic assessment of challenges in compliance to secure coding guidelines, and uses an artificial intelligence method to provide players with solution-guiding hints. Furthermore, due to its characteristics, the Sifu platform allows for remote (online) learning, in times of social distancing. The CyberSecurity Challenges events based on the Sifu platform were evaluated during four online real-life CSC events. We report on three surveys showing that the Sifu platform’s CSC events are adequate to raise industry software developers awareness on secure coding.

Using a Serious Game Approach to Teach Secure Coding in Introductory Programming: Development and Initial Findings

2012 ◽  
Vol 41 (2) ◽  
pp. 107-131 ◽  
Author(s):  
Nicoletta Adamo-Villani ◽  
Marcus Oania ◽  
Stephen Cooper
Keyword(s):  
Serious Game ◽  
Introductory Programming ◽  
Secure Coding

Firmware Secure Coding Practice

2020 ◽  
pp. 495-569
Author(s):  
Jiewen Yao ◽  
Vincent Zimmer
Keyword(s):  
Secure Coding
Sign in / Sign up

Export Citation Format

Share Document