利用嵌入式编程课程中的网络安全挑战提高安全意识
Raising Security Awareness using Cybersecurity Challenges in Embedded Programming Courses
摘要：
安全漏洞是代码中的错误，当被利用时，可能导致严重的软件漏洞。这些漏洞可能允许攻击者接管应用程序并窃取信息。解决这一问题的方法之一是通过提高认识的培训。Sifu平台是在行业中为行业开发的，旨在提高软件开发人员对安全编码的认识。本文扩展了Sifu平台的三个挑战，专门解决嵌入式编程课程，并介绍了如何实现这些挑战，同时还评估了这些挑战的有用性，以提高安全意识的学术环境。我们的工作提出了软件漏洞的检测机制的技术细节，并就如何实现它们给出了实用的建议。挑战的评价是通过两次试验进行的，共有16名参与者。我们的初步结果表明，这些挑战适合学术界，甚至有可能被纳入官方教学课程。一个主要发现表明本科生缺乏安全编码意识。最后，我们将我们的结果与行业中以前的工作进行比较，并为从业者提供建议。
英文摘要：
Security bugs are errors in code that, when exploited, can lead to serious software vulnerabilities. These bugs could allow an attacker to take over an application and steal information. One of the ways to address this issue is by means of awareness training. The Sifu platform was developed in the industry, for the industry, with the aim to raise software developers' awareness of secure coding. This paper extends the Sifu platform with three challenges that specifically address embedded programming courses, and describes how to implement these challenges, while also evaluating the usefulness of these challenges to raise security awareness in an academic setting. Our work presents technical details on the detection mechanisms for software vulnerabilities and gives practical advice on how to implement them. The evaluation of the challenges is performed through two trial runs with a total of 16 participants. Our preliminary results show that the challenges are suitable for academia, and can even potentially be included in official teaching curricula. One major finding is an indicator of the lack of awareness of secure coding by undergraduates. Finally, we compare our results with previous work done in the industry and extract advice for practitioners.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
