Logo image
Authentic Learning on DevOps Security with Labware: Git Hooks To Facilitate Automated Security Static Analysis
Conference proceeding   Peer reviewed

Authentic Learning on DevOps Security with Labware: Git Hooks To Facilitate Automated Security Static Analysis

Md Mostafizur Rahman, MD Abdul Barek, Mst Shapna Akter, Abm Kamrul Islam Riad, Md Abdur Rahman, Hossain Shahriar, Akond Rahman and Fan Wu
Proceedings : annual International Computer Software and Applications Conference, pp.2418-2423
Annual Computers, Software, and Applications Conference (COMPSAC), 48th (Osaka, Japan, 07/02/2024–07/04/2024)
08/2024
Web of Science ID: WOS:001308581200379

Metrics

Abstract

authentic learning DevOps security education Git Git Hooks security vulnerabilities Cybersecurity Higher Education
This paper presents an innovative approach to DevOps security education, addressing the dynamic landscape of cybersecurity threats. We propose a student-centered learning methodology by developing comprehensive hands-on learning modules. Specifically, we introduce labware modules designed to automate static security analysis, empowering learners to identify known vulnerabilities efficiently. These modules offer a structured learning experience with pre-lab, hands-on, and post-lab sections, guiding students through DevOps concepts and security challenges. In this paper, we introduce hands-on learning modules that familiarize students with recognizing known security flaws through the application of Git Hooks. Through prac-tical exercises with real-world code examples containing security flaws, students gain proficiency in detecting vulnerabilities using relevant tools. Initial evaluations conducted across educational institutions indicate that these hands-on modules foster student interest in software security and cybersecurity and equip them with practical skills to address DevOps security vulnerabilities.

Details

Logo image