@inproceedings{5d0515fcd3874d618228fe3763573f97,
title = "Hierarchy-driven approach for attack patterns in software security education",
abstract = "We propose a hierarchy-driven approach to facilitate student learning and foster a deeper understanding of the importance of attack patterns in computer, network, and software security. This is a fundamental point in computer and software security education because the {"}atch and pray{"} mentality of software security is insufficient. The importance and significance of our approach is justified by accentuating the deficiencies in previous ad-hoc approaches to teaching attack patterns. Because of the vast amount of information in attack pattern repositories, it is unrealistic to expect students to fully comprehend attack pattern fundamentals and its place in computer, network, and software security.",
keywords = "Attack patterns, Attack trees, Hierarchy, Refinement",
author = "Pauli, \{Joshua J.\} and Engebretson, \{Patrick H.\}",
year = "2008",
doi = "10.1109/ITNG.2008.15",
language = "English (US)",
isbn = "0769530990",
series = "Proceedings - International Conference on Information Technology: New Generations, ITNG 2008",
pages = "1156--1157",
booktitle = "Proceedings - International Conference on Information Technology",
note = "International Conference on Information Technology: New Generations, ITNG 2008 ; Conference date: 07-04-2008 Through 09-04-2008",
}