Séminaire SoSySec : Empower New Code Citizens to Reflect and Communicate on Code Security

Seminar
Starting on
Ending on
Location
IRISA Rennes
Room
Salle Aurigny
Speaker
Manuel Maarek (Heriot-Watt University)
Main department
D1 - Secured and large scale systems
SoSySec seminar
Software and Systems Security
Inria - Rennes
Tuesday May 20th, 11:00
In-person: Aurigny
 
----------------------------------------------------------------------
Manuel Maarek (Heriot-Watt University)
----------------------------------------------------------------------
======================================================================
Empower New Code Citizens to Reflect and Communicate on Code Security
======================================================================
Creating secure software code requires software engineers to elicit and follow the security requirements of the
system they are building. Software engineer teams might not have the security expertise to approach this angle of software development confidently. With the democratisation of access to software development and deployment,
software are often built by developers with neither software engineering expertise nor security knowledge, a situation that could make systems vulnerable. We present approaches based on short games, knowledge cards and serious game jams designed to help these non-experts gain the knowledge and ability to communicate on code security. These are some of the outputs of the Secrious project published recently in the IEEE Security & Privacy magazine, and in the ACM Games and Computer Standards & Interfaces journals. The project was supported by the Engineering and Physical Research Council (Grant EP/T017511/1 "Serious Coding: A Game Approach To Security For The New Code-Citizens").
 
Manuel Maarek from Heriot-Watt University is visiting the Université de Rennes/IRISA as part of the MLSEAN Machine Learning based software systems SEcurity ANalysis project supported by the UK-France Science,
Innovation, and Technology Researcher Mobility Scheme.
 
----------------------------------------------------------------------
To follow the presentation remotely, please connect to the following URL with a modern web browser:
 
----------------------------------------------------------------------
 
Seminar taking place in person with mandatory registration at least 48h beforehand for *all* in-person participants by email to Nadia Derouault <nadia [*] derouaultatinria [*] fr>. Participants non-affiliated with Inria or IRISA will be asked to present an ID at the reception desk of the IRISA building.
 
To receive the SoSySec announcements, please subscribe to the SoSySec mailing list:
All past and future SoSySec talks are listed at
----------------------------------------------------------------------
 
Séminaire en présentiel ouvert à tous mais avec inscription obligatoire au moins 48h à l'avance pour *tous* les participants en présentiel auprès de Nadia Derouault <nadia [*] derouaultatinria [*] fr>.
Les participants externes devront se présenter à l'accueil avec une pièce d'identité.
 
Vous pouvez vous abonner à nos annonces de séminaires :
et consulter la liste des exposés passés et à venir :