A framework for teaching secure coding practices to STEM students with mobile devices

Abstract

TSCPSTEM is a framework that introduces security concepts and practices to STEM students through the web portal designed to run on mobile devices for easy access. TSCPSTEM's framework will equip students with the required skills and knowledge to guard against programming errors that lead to vulnerabilities in programs. While providing fundamental skills required for STEM students for secure coding, students will also gain the skills set necessary to identifying and taking precautionary measures to prevent insecurity in programs. TSCPSTEM's educational framework, which implements security concepts through tutorials, practical tests, quizzes and lab demos, will also implement robust game challenge for students to enhance learning. Most essentially, we will design this gaming module for delivery to run on different mobile devices, including android, while using good learning theory and proper instructional design for learning to be effective. We will also demonstrate the use of static-analysis tools such as CryptoLint, Klocwork Insight, and APKInspector for detecting weaknesses in mobile devices applications.