Method and system for adaptive security guidance

A system, comprising:

• at least one processor;
• and
• at least one non-transitory computer readable storage medium comprising computer readable instructions that, when executed by the at least one processor, cause the system to:
• process computer readable code as the computer readable code is being written in a development environment to identify one or more errors in the computer readable code, the development environment being viewable by way of a display;
• cause at least one error of the one or more errors in the computer readable code to be displayed differently in the development environment compared to a portion of the computer readable code that is free from having the one or more errors in real-time as the code is being written in the development environment;
• identify a user profile associated with the development environment within which the computer readable code is written;
• search a database for user profile information indicative of a training sequence performed by a user associated with the user profile;
• identify a type of the at least one error of the one or more errors identified in the computer readable code;
• compare the type of the at least one of the one or more errors identified in the computer readable code with one or more properties associated with the training sequence;
• calculate a severity of the at least one error based on the comparison with the one or more properties associated with the training sequence;
• assign a competence level to the user associated with the user profile based on the calculated severity;
• generate a remediation suggestion to correct the at least one error of the one or more errors in the computer readable code based on the competence level;
• cause the remediation suggestion to be concurrently displayed with the computer readable code in the development environment;
• identify a quantity of tasks included in the training sequence performed by the user associated with the user profile;
• identify a quantity of the tasks completed free from error;
• and
• compare a quantity of the one or more errors with the quantity of tasks completed free from error,
• wherein the competence level assigned to the user associated with the user profile is further based on the comparison of the quantity of the one or more errors with the quantity of tasks completed free from error,
• the remediation suggestion comprises a comparison view of the computer readable code having the at least one error of the one or more errors and a preview of the computer readable code free from having the at least one of the one or more errors, and a selectable link to correct the computer readable code in accordance with the preview of the computer readable code free from having the at least one of the one or more errors, and
• each of the one or more errors is associated with a type of security vulnerability in the computer readable code.

A method, comprising:

• processing, by a processor, computer readable code as the computer readable code is being written in a development environment to identify one or more errors in the computer readable code, the development environment being viewable by way of a display;
• causing at least one error of the one or more errors in the computer readable code to be displayed differently in the development environment compared to a portion of the computer readable code that is free from having the one or more errors in real-time as the code is being written in the development environment;
• identifying a user profile associated with the development environment within which the computer readable code is written;
• searching a database for user profile information indicative of a training sequence performed by a user associated with the user profile;
• identifying a knowledge level of the user associated with the user profile based on a quantity of training sessions included in the training sequence completed by the user associated with the user profile;
• identifying a compliance level associated with a type of security feature instructed by way of the training sessions based on a determination of whether the one or more errors match the security feature, the compliance level being based on a quantity of the one or more errors compared to a quantity of the computer readable code that is free from having the one or more errors;
• causing a graphical user interface indicative of the knowledge level and the compliance level to be output by the display;
• causing a remediation suggestion to be output by the display, the remediation suggestion being based on the compliance level;
• identifying a quantity of tasks included in the training sequence performed by the user associated with the user profile;
• identifying a quantity of the tasks completed free from error;
• and
• comparing a quantity of the one or more errors with the quantity of tasks completed free from error,
• wherein
• the compliance level is further based on the comparison of the quantity of the one or more errors with the quantity of tasks completed free from error,
• each of the one or more errors is associated with a type of security vulnerability in the computer readable code,
• the remediation suggestion is caused to be concurrently displayed with the computer readable code in the development environment, and
• the remediation suggestion comprises:
• a comparison view of the computer readable code having the at least one of the one or more errors and a preview of the computer readable code free from having the at least one of the one or more errors;
• a selectable link to correct the computer readable code in accordance with the preview of the computer readable code free from having the at least one of the one or more errors;
• and
• an instruction to repeat at least a portion of the training sequence comprising one or more tasks previously performed by the user associated with the user profile, or a new training sequence generated for the user based on one or more of the knowledge level or the compliance level comprising one or more new tasks to teach the user associated with the user profile a skill associated with writing the computer readable code.