A Learning Environment for Software Security Education

In recent years, importance on software security has been recognized. Along with the trend, to foster software engineers who possess software security technologies is expressed. The authors have been tackling software engineering education, and have lots of artifacts as the outcomes of the education. The authors propose a learning process that utilizes these artifacts as input for learning of software security and the learners create artifacts for secure software referring to various types of guidelines (methods for secure software development, patterns, standards, and so on). The authors also propose a learning environment to support the process, which adopts a knowledge management approach. The environment enables to store the artifacts, guidelines and rationale, and learners to associate relationships among them.