“我不太懂”：论计算机科学专业学生的安全意识
"I Don't Know Too Much About It": On the Security Mindsets of Computer Science Students
摘要：
软件开发人员的安全态度和方法对他们生产的软件有很大的影响，但我们对这些视图是如何以及何时构建的知之甚少。本文调查了安全和隐私（S&P）的看法，经验和做法，目前计算机科学的学生在研究生和本科水平使用半结构化访谈。我们发现，学生的态度已经与许多在专业水平的开发人员中观察到的态度相匹配。学生们有一系列黑客和攻击的心态，缺乏安全API的经验，对软件生存周期中谁负责S&P的看法不一，并且倾向于信任其他人的代码作为快速构建软件的方便方法。我们讨论了我们的结果对课程开发和专业开发人员的支持的影响。
英文摘要：
The security attitudes and approaches of software developers have a large impact on the software they produce, yet we know very little about how and when these views are constructed. This paper investigates the security and privacy (S&P) perceptions, experiences, and practices of current Computer Science students at the graduate and undergraduate level using semi-structured interviews. We find that the attitudes of students already match many of those that have been observed in professional level developers. Students have a range of hacker and attack mindsets, lack of experience with security APIs, a mixed view of who is in charge of S&P in the software life cycle, and a tendency to trust other peoples' code as a convenient approach to rapidly build software. We discuss the impact of our results on both curriculum development and support for professional developers.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
