Skip to Main content Skip to Navigation
Conference papers

Learning Principles and the Secure Programming Clinic

Abstract : Several academic institutions have run a clinic on robust and secure programming. Each time a clinic was run, it was associated with a specific class. Using pre- and post-class evaluation instruments, it is clear that the effect of the secure programming clinic on students’ understanding of secure programming was generally positive. However, in some instances the clinic was underutilized, and in other cases it could not be run at other institutions. The goal of this paper is to examine the structure of the clinic in light of five basic learning principles, and provide information about when a clinic will not improve students’ understanding, and when it will. We validate this by examining an instance of the secure programming clinic, and show how the learning principles explain the improvement in student grades, or lack thereof. From this, we draw conclusions about ways to make the clinic more effective, and when it will not be effective.
Document type :
Conference papers
Complete list of metadata

Cited literature [22 references]  Display  Hide  Download
Contributor : Hal Ifip <>
Submitted on : Friday, November 15, 2019 - 2:56:11 PM
Last modification on : Friday, November 15, 2019 - 3:02:21 PM
Long-term archiving on: : Sunday, February 16, 2020 - 6:20:28 PM


 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2022-01-01

Please log in to resquest access to the document


Distributed under a Creative Commons Attribution 4.0 International License



Matt Bishop, Melissa Dark, Lynn Futcher, Johan Niekerk, Ida Ngambeki, et al.. Learning Principles and the Secure Programming Clinic. 12th IFIP World Conference on Information Security Education (WISE), Jun 2019, Lisbon, Portugal. pp.16-29, ⟨10.1007/978-3-030-23451-5_2⟩. ⟨hal-02365739⟩



Record views