Development of a Software Security Learning Environment

The importance of software security technologies is increasingly being recognized with the increase in services available on the Internet. It is important to foster human resources with knowledge and skills relevant to software security technologies. This paper proposes a learning process for software security and a learning environment that supports the learning process. In the learning process, learners create artifacts for software security from artifacts created in a traditional software engineering course, without dealing with software security, by referring to the reference information for software security (standards, methodologies, guidelines, security patterns, and so on). The learning environment supports storage of (1) the artifacts created in a traditional software engineering course, (2) artifacts created in a software security course, (3) the reference information and the relationships between different pieces of the reference information, (4) the rationale and association of the reference information with the artifacts created in a software security course, and (5) review comments and their association with the artifacts created in a software security course.