Educating Students to Create Trustworthy Systems

igh level of abstraction and to provide broad oversight. In contrast, the goal of computer science security education is to provide the technicalexpertisetodevelopsecure software and defend against lowlevel attacks. Faculty and industry must find novel, cross-disciplinary approaches to educating security professionals to fullyaddressthisarrayofissues.Inthis article, we analyze barriers to effectivesecurityeducationandoffersuggestions for improving cooperation among computer science, business management, information systems, and other technology departments. Old paradigms, new challenges The status quo in computer security education doesn’t include crosscutting aspects such as managing computer security, risk analysis, security architecture design, or the humanfactorsandusabilityofsecure systems; yet, even if source materials were to include such elements, many instructors would likely use this material only if driven to do so. This arises both from their interests and the availabili...

• Type: Journal
• Year: 2007
• Where: IEEESP
• Authors: Richard S. Swart, Robert F. Erbacher
• Keywords: IEEESP 2007, Science Security Education, Security, Security Education