Feeds

Leeds Uni, MS teach undergrads to write secure code

Course work

  • alert
  • submit to reddit

Remote control for virtualized desktops

Microsoft has teamed up with the University of Leeds to develop the UK's first undergraduate computer security module to focus on the skills which developers need write secure code.

The course kicks off in January 2004. Students will get hands-on experience of writing secure code and will learn to appreciate the fundamental role of security in software engineering. In addition to standard security topics, the module will cover threat modelling and basic security analysis of code, teaching students to identify potential weaknesses within their programs that could be exploited by unscrupulous crackers or virus writers.

Microsoft UK Chief Security Officer Stuart Okin said: "We are working with the University of Leeds because until now Computer Science graduates in this country were not obtaining adequate theoretical or practical experience. For instance, the module will educate students about buffer over-runs and how to avoid the pitfalls such as those exposed in the recent Slammer virus outbreak."

Professor Tony Cohn, Head of the School of Computing at the University of Leeds said he hoped the module help students to write better code while helping to give them an edge in the employment market on graduation.

John Harrison, an executive committee member of SAINT (Security Alliance for the Internet and New Technologies), has been working closely with the University of Leeds to promote information security within the curriculum.

"This is a very important step towards introducing security engineering into mainstream computer science and software engineering," said Harrison. "It is a serious omission that we have been training the next generation of software developers without this emphasis on security design principles and I hope other universities will follow this lead."
Microsoft is partly funding a Fellowship at the University. It is also working with the University of Leeds to develop the curriculum's content, which will "highlight the lessons learned from Microsoft's Trustworthy Computing initiative".

The company hopes to team up with other colleges and universities to offer similar courses worldwide.

Microsoft's recently announced a deal with Hull University to develop the UK's first postgraduate course in .NET. ®

Related Stories

Win a computer science bursary at Queen Mary
Cost of securing Windows Server 2003? Nearly $200m
Trustworthy Computing does Moon Walk (but not yet)
Microsoft outlines 3D progress to Trustworthiness
Open and closed security are roughly equivalent

Remote control for virtualized desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The Heartbleed Bug: how to protect your business with Symantec
What happens when the next Heartbleed (or worse) comes along, and what can you do to weather another chapter in an all-too-familiar string of debilitating attacks?