Implementing A Successful Secure Coding Continuing Education Curriculum For Industry: Challenges and Successful Strategies

摘要

Most industry software engineers have little experience designing and building secure systems; features and time-to-market have been their focus. With the rising demand for secure software, there is a corresponding increased need for continuing education classes to improve engineers’ skills. This type of course has different challenges from academic classes; these differences are because continuing education courses have no grades and they run all day for several consecutive days. This paper describes these classes and presents an overview of topics covered in the classes, providing example exercises. Challenges in offering such classes are discussed and solutions are presented.