English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Lack of security expertise among software practitioners is a problem withmany implications. First, there is a deficit of security professionals to meetcurrent needs. Additionally, even practitioners who do not plan to work insecurity may benefit from increased understanding of security. The goal of thispaper is to aid software engineering educators in designing a comprehensivesoftware security course by sharing an experience running a software securitycourse for the eleventh time. Through all the eleven years of running thesoftware security course, the course objectives have been comprehensive -ranging from security testing, to secure design and coding, to securityrequirements to security risk management. For the first time in this eleventhyear, a theme of the course assignments was to map vulnerability discovery tothe security controls of the Open Web Application Security Project (OWASP)Application Security Verification Standard (ASVS). Based upon studentperformance on a final exploratory penetration testing project, this mappingmay have increased students' depth of understanding of a wider range ofsecurity topics. The students efficiently detected 191 unique and verifiedvulnerabilities of 28 different Common Weakness Enumeration (CWE) types duringa three-hour period in the OpenMRS project, an electronic health recordapplication in active use.

Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard