Web-based Intelligent Tutoring System for Software Security

Abstract

Software security is a computer science topic which has been under discussion for many years. At the same time, most of the software vulnerabilities as well as their corresponding prevention methodologies have also been discussed in detail. However, there still exists a large amount of applications which contain at least one kind of security flaws. In view of this situation, an intelligent tutoring system, ITS in short, for software security is proposed so as to provide training for developers on the topic of software security. Nevertheless, since there exists a large number of programming languages and an even larger amount of software vulnerabilities, it is not possible to introduce all of them into the solution within a short period of time. After certain consideration, SQL injection together with Java language is chosen as an example for illustrating the feasibility of the proposed solution. It is expected that the knowledge related to SQL injection can be effectively trained through the use of the proposed ITS and a detail discussion will be carried out at the end of the report for justifying its effectiveness.