Learning Principles and the Secure Programming Clinic - Information Security Education Access content directly
Conference Papers Year : 2019

Learning Principles and the Secure Programming Clinic

Matt Bishop
  • Function : Author
  • PersonId : 983834
Melissa Dark
  • Function : Author
  • PersonId : 983833
Lynn Futcher
  • Function : Author
  • PersonId : 1047164
Ida Ngambeki
  • Function : Author
  • PersonId : 1026983
Somdutta Bose
  • Function : Author
  • PersonId : 1058407
Minghua Zhu
  • Function : Author
  • PersonId : 1026985


Several academic institutions have run a clinic on robust and secure programming. Each time a clinic was run, it was associated with a specific class. Using pre- and post-class evaluation instruments, it is clear that the effect of the secure programming clinic on students’ understanding of secure programming was generally positive. However, in some instances the clinic was underutilized, and in other cases it could not be run at other institutions. The goal of this paper is to examine the structure of the clinic in light of five basic learning principles, and provide information about when a clinic will not improve students’ understanding, and when it will. We validate this by examining an instance of the secure programming clinic, and show how the learning principles explain the improvement in student grades, or lack thereof. From this, we draw conclusions about ways to make the clinic more effective, and when it will not be effective.
Fichier principal
Vignette du fichier
485999_1_En_2_Chapter.pdf (190.7 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02365739 , version 1 (15-11-2019)





Matt Bishop, Melissa Dark, Lynn Futcher, Johan Van Niekerk, Ida Ngambeki, et al.. Learning Principles and the Secure Programming Clinic. 12th IFIP World Conference on Information Security Education (WISE), Jun 2019, Lisbon, Portugal. pp.16-29, ⟨10.1007/978-3-030-23451-5_2⟩. ⟨hal-02365739⟩
72 View
79 Download



Gmail Facebook X LinkedIn More