Integrating Security Concepts Into Introductory Programming Courses

Alina Torbunova; Ivan Porres

doi:10.1007/978-3-031-94924-1_15

Integrating Security Concepts Into Introductory Programming Courses

Informaatioteknologia

Tutkimustuotos: Artikkeli kirjassa/raportissa/konferenssijulkaisussa › Konferenssiartikkeli › Tieteellinen › vertaisarvioitu

1 Sitaatiot (Scopus)

23 Lataukset (Pure)

Abstrakti

This article proposes a method to help students develop a security mindset by incorporating security concepts into a university-level introductory programming course. The method is based on a mapping of introductory programming topics to relevant security concepts. The mapping is used to modify lecture materials and programming projects to incorporate security-related information and requirements. These modifications are added gradually, with minimal impact on existing learning outcomes and expected student effort. We evaluated our method in a case study on the introduction of security concepts in an introductory programming course in Python. For this, we analyzed student programming projects and conducted a post-course survey. The results show improved security implementation in student projects and increased awareness of the importance of security in programming.

Alkuperäiskieli	Englanti
Otsikko	Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings
Toimittajat	Lynette Drevin, Wai Sze Leung, Suné von Solms
Kustantaja	Springer
Sivut	217-233
Sivumäärä	16
ISBN (elektroninen)	978-3-031-94924-1
ISBN (painettu)	978-3-031-94923-4
DOI - pysyväislinkit	https://doi.org/10.1007/978-3-031-94924-1_15
Tila	Julkaistu - 26 heinäk. 2025
OKM-julkaisutyyppi	A4 Artikkeli konferenssijulkaisuussa
Tapahtuma	IFIP World Conference on Information Security Education - Kesto: 21 toukok. 2025 → 23 toukok. 2025

Julkaisusarja

Nimi	IFIP Advances in Information and Communication Technology
Vuosikerta	742 IFIPAICT
ISSN (painettu)	1868-4238
ISSN (elektroninen)	1868-422X

Konferenssi

Konferenssi	IFIP World Conference on Information Security Education
Ajanjakso	21/05/25 → 23/05/25

Rahoitus

This work has received funding from the Finnish Ministry of Education and Culture under grant agreement OKM/60/522/2022. We would like to thank Annamari Soini for providing the opportunity to perform a case study on the method proposed in this paper.

Pääsy asiakirjaan

10.1007/978-3-031-94924-1_15

Integrating_security_concepts_FINALHyväksytty kirjoittajan käsikirjoitus, 290 KBLisenssi: Publisher rights policy

https://urn.fi/URN:NBN:fi-fe2025081382394

Cyber security training cooperation network
Porres Paltor, I. (Vastuullinen tutkija), Walden, M. (Vastuullinen tutkija), Torbunova, A. (Projektityöntekijä), Nybom, K. (Projektityöntekijä) & Truscan, D. (Projektityöntekijä)
01/02/23 → 31/12/25
Projekti: Ministry / Government Agency

Viittausmuodot

Torbunova, A., & Porres, I. (2025). Integrating Security Concepts Into Introductory Programming Courses. teoksessa L. Drevin, W. S. Leung, & S. von Solms (Toimittajat), Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings (Sivut 217-233). (IFIP Advances in Information and Communication Technology; Vuosikerta 742 IFIPAICT). Springer. https://doi.org/10.1007/978-3-031-94924-1_15

Torbunova, Alina ; Porres, Ivan. / Integrating Security Concepts Into Introductory Programming Courses. Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings. Toimittaja / Lynette Drevin ; Wai Sze Leung ; Suné von Solms. Springer, 2025. Sivut 217-233 (IFIP Advances in Information and Communication Technology).

@inproceedings{504a85d760a44af98e8a196f420e1945,

title = "Integrating Security Concepts Into Introductory Programming Courses",

abstract = "This article proposes a method to help students develop a security mindset by incorporating security concepts into a university-level introductory programming course. The method is based on a mapping of introductory programming topics to relevant security concepts. The mapping is used to modify lecture materials and programming projects to incorporate security-related information and requirements. These modifications are added gradually, with minimal impact on existing learning outcomes and expected student effort. We evaluated our method in a case study on the introduction of security concepts in an introductory programming course in Python. For this, we analyzed student programming projects and conducted a post-course survey. The results show improved security implementation in student projects and increased awareness of the importance of security in programming.",

author = "Alina Torbunova and Ivan Porres",

year = "2025",

month = jul,

day = "26",

doi = "10.1007/978-3-031-94924-1\_15",

language = "English",

isbn = "978-3-031-94923-4",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer",

pages = "217--233",

editor = "Lynette Drevin and Leung, \{Wai Sze\} and \{von Solms\}, Sun{\'e}",

booktitle = "Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings",

note = "IFIP World Conference on Information Security Education ; Conference date: 21-05-2025 Through 23-05-2025",

}

Torbunova, A & Porres, I 2025, Integrating Security Concepts Into Introductory Programming Courses. julkaisussa L Drevin, WS Leung & S von Solms (toim), Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings. IFIP Advances in Information and Communication Technology, Vuosikerta 742 IFIPAICT, Springer, Sivut 217-233, IFIP World Conference on Information Security Education, 21/05/25. https://doi.org/10.1007/978-3-031-94924-1_15

Integrating Security Concepts Into Introductory Programming Courses. / Torbunova, Alina ; Porres, Ivan.
Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings. toim. / Lynette Drevin; Wai Sze Leung; Suné von Solms. Springer, 2025. s. 217-233 (IFIP Advances in Information and Communication Technology; Vuosikerta 742 IFIPAICT).

Tutkimustuotos: Artikkeli kirjassa/raportissa/konferenssijulkaisussa › Konferenssiartikkeli › Tieteellinen › vertaisarvioitu

TY - GEN

T1 - Integrating Security Concepts Into Introductory Programming Courses

AU - Torbunova, Alina

AU - Porres, Ivan

PY - 2025/7/26

Y1 - 2025/7/26

N2 - This article proposes a method to help students develop a security mindset by incorporating security concepts into a university-level introductory programming course. The method is based on a mapping of introductory programming topics to relevant security concepts. The mapping is used to modify lecture materials and programming projects to incorporate security-related information and requirements. These modifications are added gradually, with minimal impact on existing learning outcomes and expected student effort. We evaluated our method in a case study on the introduction of security concepts in an introductory programming course in Python. For this, we analyzed student programming projects and conducted a post-course survey. The results show improved security implementation in student projects and increased awareness of the importance of security in programming.

AB - This article proposes a method to help students develop a security mindset by incorporating security concepts into a university-level introductory programming course. The method is based on a mapping of introductory programming topics to relevant security concepts. The mapping is used to modify lecture materials and programming projects to incorporate security-related information and requirements. These modifications are added gradually, with minimal impact on existing learning outcomes and expected student effort. We evaluated our method in a case study on the introduction of security concepts in an introductory programming course in Python. For this, we analyzed student programming projects and conducted a post-course survey. The results show improved security implementation in student projects and increased awareness of the importance of security in programming.

U2 - 10.1007/978-3-031-94924-1_15

DO - 10.1007/978-3-031-94924-1_15

M3 - Published conference proceeding

SN - 978-3-031-94923-4

T3 - IFIP Advances in Information and Communication Technology

SP - 217

EP - 233

BT - Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings

A2 - Drevin, Lynette

A2 - Leung, Wai Sze

A2 - von Solms, Suné

PB - Springer

T2 - IFIP World Conference on Information Security Education

Y2 - 21 May 2025 through 23 May 2025

ER -

Torbunova A , Porres I. Integrating Security Concepts Into Introductory Programming Courses. julkaisussa Drevin L, Leung WS, von Solms S, toimittajat, Information Security Education. Empowering People Through Information Security Education - 17th IFIP WG 11.8 World Conference, WISE 2025, Proceedings. Springer. 2025. s. 217-233. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-031-94924-1_15

Integrating Security Concepts Into Introductory Programming Courses

Abstrakti

Julkaisusarja

Konferenssi

Rahoitus

Pääsy asiakirjaan

Projektit

Cyber security training cooperation network

Viittausmuodot