Explore a novel approach to secure software development through a contest-based framework presented at the 23rd ACM Conference on Computer and Communications Security. Delve into the principles, structure, and incentive systems of the "Build It, Break It, Fix It" contest, designed to improve secure coding practices. Examine the scoring system, contest data, and results from the secure log implementation challenge. Analyze the impact of programming language choices, common bugs, and resilience factors on security outcomes. Gain insights into future research directions and potential applications of this innovative methodology for enhancing software security.
Build It, Break It, Fix It - Contesting Secure Development
Association for Computing Machinery (ACM) via YouTube
Overview
Syllabus
Introduction
Why Contests
Principles
Contest Structure
Incentive Structures
Scoring System
Break It and Fix It
Builder Scores
Zerosum Game
Contest Data
Build It
Fix It
The Results
Secure Log
Results
Programming Languages
Analyzing the Score
The Score Table
The Graph
Common bugs
Example
Resilience
Future Research
Conclusion
Taught by
ACM CCS
