Training systems for secure software code
AssigneeSecure Code Warrior Limited
InventorsPieter Danhieux, John Fitzgerald
Life of this patent
Estimating the term…
Abstract
A training system for providing training facilities for users to learn secure coding techniques, the training system comprising: a computer server system comprising one or more computer processors and memory for storing computer code, said computer code, when executed by said processors, being adapted to; provide means for provision of a plurality of unique user accounts and means for a user to securely access an associated user account; serve insecure software code example snippets to a user interface for review by said user; processing a solution to said insecure code snippets, said solution being entered via user interface by said user; and providing feedback to said user regarding the validity of said solution.
Claims17
A training system for providing training facilities for secure coding techniques, the training system comprising:
- a computer server system comprising one or more computer processors and memory for storing computer code, said computer code, when executed by said processors, being adapted to;
- provide means for provision of a plurality of unique user accounts and means for a user to securely access an associated user account;
- serve insecure software code example snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- process a solution to said one or more vulnerabilities in said insecure software code example snippets, said solution being entered via a user interface by said user;
- and
- provide feedback to said user regarding the validity of said solution.
A training method for training users in secure software coding competency, said method comprising the steps of:
- providing a computer server system comprising one or more computer processors and memory for storing computer code, said computer code, when executed by said processors, being adapted to serve a training system to said users;
- providing means for provision of a plurality of unique user accounts and means for said users to securely access an associate account;
- serving examples of insecure software code snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- processing a solution to said one or more vulnerabilities in said insecure software code example snippets, said solution being entered via a user interface by said user;
- and
- providing feedback to said user regarding the validity of said solution.
A computer program product having a computer readable medium having a computer program recorded therein for providing training facilities for users to learn secure coding techniques said computer program product comprising:
- means for provision of a plurality of unique user accounts and means for a user to securely access an associated user account;
- an application module adapted to serve insecure software code example snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- providing an input means to allow said user to enter via a user interface a solution to said one or more vulnerabilities in said insecure software code example snippets;
- a processing application module for processing the solution;
- and
- providing feedback to said user regarding the validity of said solution.
A computer program for providing training facilities for users to learn secure coding techniques, said program comprising:
- code for provision of a plurality of unique user accounts and means for a user to securely access an associated user account;
- code for serving insecure software code example snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- code for processing a solution to said one or more vulnerabilities in said insecure software code example snippets, said solution being entered via a user interface by said user;
- and
- code for providing feedback to said user regarding the validity of said solution.
A computer program element comprising computer program code means to make a computer execute a procedure to providing training facilities for users to learn secure coding techniques, said computer program element comprising:
- code for provision of a plurality of unique user accounts and means for a user to securely access an associated user account;
- code for serving insecure software code example snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- code for processing a solution to said one or more vulnerabilities in said insecure software code example snippets, said solution being entered via a user interface by said user;
- and
- code for providing feedback to said user regarding the validity of said solution.
A computer readable medium, having a program recorded thereon, where the program is configured to make a computer execute a procedure to provide training facilities for users to learn secure coding techniques, the procedure comprising:
- providing means for provision of a plurality of unique user accounts and means for a user to securely access an associated user account;
- serving insecure software code example snippets to a user interface for said user to identify one or more vulnerabilities in said insecure software code example snippets;
- processing a solution to said one or more vulnerabilities in said insecure software code example snippets, said solution being entered via a user interface by said user;
- and
- providing feedback to said user regarding the validity of said solution.
17-22. (canceled)
Dependencies are inferred from the claim text.