SASMEDU: Security Assessment Method of Software in Engineering Education

Abstract

Security and usability of web and mobile applications where users share their personal information have become to be a factor about which users should be careful. Rapid increase of developers, programming at early ages, desire for earning money by working freelance have caused widespread use of web and mobile applications and an increase of codes which contain vulnerabilities. Safe and good software development is also based on software lessons given to the students in high school or college years. This paper presents a developed testing and evaluation software in order to find out the leakages in the web applications which was developed by using asp.net, php and java languages. It is aimed that the developed analysis tool was designed to be used by engineering students as a training tool, in security courses by trainees and by programmers for testing. Within the scope of the study, security tests of web projects were carried out with static code analysis method in input control, metric analysis and style control phases. For testing the developed software tool, student web projects were used which were downloaded from "www.freestudentprojects.com" website. 10 test projects were tested in the stages of input control, metric analysis and style control. According to the results of the analysis, the errors were concentrated on Structural Query Language Injection and Cross Site Scripting attacks, which were developed by the students due to the lack of security audit in the projects.

Development of Models of Manufacturing Processes of Innovative Products at Different Levels of Management

“…The main activity of the enterprise in particular and within a more compound structure is modeled. The analysis of existing scientific literature in this field shows that modeling is mostly focused on either maximization of commercial revenues or minimization of expenses [10][11][12][13][14][15][16][17][18][19]. This time as manufacturing processes are mostly carried out with extensive methods, innovative processes, the application of innovations stay out of focus.…”

“…In general, the solution algorithm of MACROMOD and MICROMOD models system can be constructed as below. Initially, i F and i  form is determined [14][15][16][17][18][19][20].…”

Training and Teaching Method of Innovative Talents Under the Background of Emerging Engineering Education Strategy

“…By comparing with the training mode of engineering talents in developed countries such as Europe and America, it could be found that engineering education in our country has always given people the impression that it attaches importance to the classroom, neglects extracurricular activities, emphasizes theory and neglects practice [18,19]. Due to the lack of effective practical teaching and the disconnection between theory and practice, the theoretical knowledge of classroom teaching cannot be effectively consolidated and the practical problems faced by engineering cannot be solved effectively.…”