Abstract:Sophistication and flexibility of software development make it easy to leave security vulnerabilities in software applications for attackers. It is critical to educate and train software engineers to avoid introducing vulnerabilities in software applications in the first place such as adopting secure coding mechanisms and conducting security testing. A number of websites provide training grounds to train people's hacking skills, which are highly related to security testing skills, and train people's secure coding skills. However, there exists no interactive gaming platform for instilling gaming aspects into the education and training of secure coding. To address this issue, we propose to construct secure coding duels in Code Hunt, a high-impact serious gaming platform released by Microsoft Research. In Code Hunt, a coding duel consists of two code segments: a secret code segment and a player-visible code segment. To solve a coding duel, a player iteratively modifies the player-visible code segment to match the functional behaviors of the secret code segment. During the duel-solving process, the player is given clues as a set of automatically generated test cases to characterize sample functional behaviors of the secret code segment. The game aspect in Code Hunt is to recognize a pattern from the test cases, and to re-engineer the player-visible code segment to exhibit the expected behaviors. Secure coding duels proposed in this work are coding duels that are carefully designed to train players' secure coding skills, such as sufficient input validation and access control.

Pex4Fun: A Web-Based Environment for Educational Gaming Via Automated Test Generation

Pex4Fun: Teaching and Learning Computer Science Via Social Gaming

Teaching And Learning Computing Via Social Gaming With Pex4fun

Pex for Fun: Engineering an Automated Testing Tool for Serious Games in Computer Science

Teaching and Learning Programming and Software Engineering Via Interactive Gaming

Constructing Coding Duels in Pex4Fun and Code Hunt

Educational Software Engineering: Where Software Engineering, Education, and Gaming Meet

Transferring an automated test generation tool to practice: from pex to fakes and code digger.

Transferring an Automated Test Generation Tool to Practice

Code hunt: gamifying teaching and learning of computer science at scale

Code Hunt: Searching for Secret Code for Fun

ClassCode: An Interactive Teaching and Learning Environment for Programming Education in Classrooms

Code Hunt : Context-Driven Interactive Gaming for Learning Programming and Software Engineering

ProgEdu4Web: An automated assessment tool for motivating the learning of web programming course

A novel approach for using programming exercises in electromagnetism coursework

Measuring Code Behavioral Similarity for Programming and Software Engineering Education

From Paper to Platform: Evolution of a Novel Learning Environment for Tabletop Exercises

Programming Fun(damentals): Using commercial video games to teach basic coding to adult learners

Automated Generation of Computer Graded Unit Testing-Based Programming Assessments for Education

Gamifying Software Security Education and Training Via Secure Coding Duels in Code Hunt

Gamifying a Software Testing Course with Code Defenders