Integrating Formal Methods for Security in Software Security Education

Research output: Contribution to journalArticle

Abstract

As the number of software vulnerabilities discovered increases, the industry is facing difficulties to find specialists to cover the vacancies for security software developers. Considering relevant teaching and learning theories, along with existing approaches in software security education, we present the pedagogic rationale and the concrete implementation of a course on security protocol development that integrates formal methods for security research into the teaching practice. A novelty of the framework is the adoption of a conceptual model aligned with the level of abstraction used for the symbolic (high-level) representation of cryptographic and communication primitives. This is aimed not only at improving skills in secure software development, but also at bridging the gap between the formal representation and the actual implementation, making formal methods and tools more accessible to students and practitioners.
Original languageEnglish
Pages (from-to)425-454
Number of pages30
JournalInformatics in Education
Volume19
Issue number3
DOIs
Publication statusPublished - 16 Sep 2020

Fingerprint Dive into the research topics of 'Integrating Formal Methods for Security in Software Security Education'. Together they form a unique fingerprint.

  • Cite this