Abstract:Sophistication and flexibility of software development make it easy to leave security vulnerabilities in software applications for attackers. It is critical to educate and train software engineers to avoid introducing vulnerabilities in software applications in the first place such as adopting secure coding mechanisms and conducting security testing. A number of websites provide training grounds to train people's hacking skills, which are highly related to security testing skills, and train people's secure coding skills. However, there exists no interactive gaming platform for instilling gaming aspects into the education and training of secure coding. To address this issue, we propose to construct secure coding duels in Code Hunt, a high-impact serious gaming platform released by Microsoft Research. In Code Hunt, a coding duel consists of two code segments: a secret code segment and a player-visible code segment. To solve a coding duel, a player iteratively modifies the player-visible code segment to match the functional behaviors of the secret code segment. During the duel-solving process, the player is given clues as a set of automatically generated test cases to characterize sample functional behaviors of the secret code segment. The game aspect in Code Hunt is to recognize a pattern from the test cases, and to re-engineer the player-visible code segment to exhibit the expected behaviors. Secure coding duels proposed in this work are coding duels that are carefully designed to train players' secure coding skills, such as sufficient input validation and access control.

Code Hunt : Context-Driven Interactive Gaming for Learning Programming and Software Engineering

Code hunt: gamifying teaching and learning of computer science at scale

Code Hunt: Searching for Secret Code for Fun

Gamifying Software Security Education and Training Via Secure Coding Duels in Code Hunt

Code Hunt: Experience with Coding Contests at Scale.

Crowdsourcing Code and Process Via Code Hunt.

Constructing Coding Duels in Pex4Fun and Code Hunt

Preliminary Analysis of Code Hunt Data Set from a Contest

Proceedings of the 1st International Workshop on Code Hunt Workshop on Educational Software Engineering

Pex4Fun: Teaching and Learning Computer Science Via Social Gaming

Pex4Fun: A Web-Based Environment for Educational Gaming Via Automated Test Generation

Pex for Fun: Engineering an Automated Testing Tool for Serious Games in Computer Science

Teaching And Learning Computing Via Social Gaming With Pex4fun

Teaching and Learning Programming and Software Engineering Via Interactive Gaming

JediCode -- A Gamefied Approach to Competitive Coding

CodePlay: A Tabletop Role-Playing Game System used in Teaching Game Programming Using Content Gamification

G4D - a treasure hunt game for novice programmers to learn debugging

Engaging Young Learners with Testing Using the Code Critters Mutation Game

Code Critters: A Block-Based Testing Game

Principles of a debugging-first puzzle game for computing education

GameDevDojo -- An Educational Game for Teaching Game Development Concepts