Logo image
Teaching DevOps Security Education with Hands-on Labware: Automated Detection of Security Weakness in Python
Preprint   Open access

Teaching DevOps Security Education with Hands-on Labware: Automated Detection of Security Weakness in Python

Mst Shapna Akter, Juanjose Rodriguez-Cardenas, Md Mostafizur Rahman, Hossain Shahriar, Akond Rahman and Fan Wu
arXiv
08/14/2023

Metrics

1 Record Views

Abstract

DevOps security education Taint tracking Bandit Vulnerabilities Authentic learning Control Applications (Computer Sciences) Cryptology Higher Education
The field of DevOps security education necessitates innovative approaches to effectively address the ever-evolving challenges of cybersecurity. In adopting a student-centered ap-proach, there is the need for the design and development of a comprehensive set of hands-on learning modules. In this paper, we introduce hands-on learning modules that enable learners to be familiar with identifying known security weaknesses, based on taint tracking to accurately pinpoint vulnerable code. To cultivate an engaging and motivating learning environment, our hands-on approach includes a pre-lab, hands-on and post lab sections. They all provide introduction to specific DevOps topics and software security problems at hand, followed by practicing with real world code examples having security issues to detect them using tools. The initial evaluation results from a number of courses across multiple schools show that the hands-on modules are enhancing the interests among students on software security and cybersecurity, while preparing them to address DevOps security vulnerabilities.
url
Teaching DevOps Security Education with Hands-on Labware: Automated Detection of Security Weakness in PythonView
Preprint link to article Open CC BY V4.0

Details

Logo image