Teaching Secure Programming to Information Systems Students via OWASP Techniques and Libraries

摘要

Current and future Information Systems (IS) personnel and management need to understand SQL Injection, cross-site scripting (XSS), and other web-originating information security vulnerabilities. These can have severe negative impacts, anc minimizing these threats is an important consideration for application developers. There are many resources on the Internei and in books to help educate people about these and similar intrusions. The Open Web Application Security Projed (OWASP) includes a robust amount of information on this subject and is an excellent starting point in the creation of lecture, demonstration, and student practice on the subject. Using OWASP resources and active software examples is an effective and efficient method to teach IS students on potential security breaches and their prevention.