As computing becomes a mainstream discipline embedded in the school curriculum and acts as an enabler for an increasing range of academic disciplines in higher education, the literature on introductory programming is growing. Although there have been several reviews that focus on specific aspects of introductory programming, there has been no broad overview of the literature exploring recent trends across the breadth of introductory programming. This paper is the report of an ITiCSE working group that conducted a systematic review in order to gain an overview of the introductory programming literature. Partitioning the literature into papers addressing the student, teaching, the curriculum, and assessment, we explore trends, highlight advances in knowledge over the past 15 years, and indicate possible directions for future research.

/pdf/introductory-programming-a-systematic-literature-review-3yllvt7k18.pdf

Introductory programming: a systematic literature review

https://gala.gre.ac.uk/9243/1/(item_9243)_kazimoglu_2012_cms.pdf

A Serious Game for Developing Computational Thinking and Learning Introductory Computer Programming

This paper outlines an innovative game model for learning computational thinking (CT) skills through digital game-play. We have designed a game framework where students can practice and develop their skills in CT with little or no programming knowledge. We analyze how this game supports various CT concepts and how these concepts can be mapped to programming constructs to facilitate learning introductory computer programming. Moreover, we discuss the potential benefits of our approach as a support tool to foster student motivation and abilities in problem solving. As initial evaluation, we provide some analysis of feedback from a survey response group of 25 students who have played our game as a voluntary exercise. Structured empirical evaluation will follow, and the plan for that is briefly described.

Learning Programming at the Computational Thinking Level via Digital Game-Play

Learning Basic Programming Concepts by Creating Games with Scratch Programming Environment

One of the many challenges novice programmers face from the time they write their first program is inadequate compiler error messages. These messages report details on errors the programmer has made and are the only feedback the programmer gets from the compiler. For students they play a particularly essential role as students often have little experience to draw upon, leaving compiler error messages as their primary guidance on error correction. However these messages are frequently inadequate, presenting a barrier to progress and are often a source of discouragement. We have designed and implemented an editor that provides enhanced compiler error messages and conducted a controlled empirical study with CS1 students learning Java. We find a reduced frequency of overall errors and errors per student. We also identify eight frequent compiler error messages for which enhancement has a statistically significant effect. Finally we find a reduced number of repeated errors. These findings indicate fewer students struggling with compiler error messages.

/pdf/an-effective-approach-to-enhancing-compiler-error-messages-xmgnhpeeqy.pdf

An Effective Approach to Enhancing Compiler Error Messages

The problems associated with learning and teaching first year University Computer Science (CS1) programming classes are summarized showing that various support tools and techniques have been develo...

https://www.tandfonline.com/doi/pdf/10.11120/ital.2011.10010078

Emergent requirements for supporting introductory programming

Digital deposits are undergoing exponential growth. These may in turn be exploited to support cyber security initiatives through open source intelligence gathering. Open source intelligence itself is a doubleedged sword as the data may be harnessed not only by intelligence services to counter cyber-crime and terrorist activity but also by the perpetrator of criminal activity who use them to socially engineer online activity and undermine their victims. Our preliminary case study shows how the security of any company can be surreptitiously compromised by covertly gathering the open source personal data of the company’s employees and exploiting these in a cyber attack. Our method uses tools that can search, drill down and visualise open source intelligence structurally. It then exploits these data to organise creative spear phishing attacks on the unsuspecting victims who unknowingly activate the malware necessary to compromise the company’s computer systems. The entire process is the covert and virtual equivalent of overtly stealing someone’s password ‘over the shoulder’. A more sophisticated development of this case study will provide a seamless sequence of interoperable computing processes from the initial gathering of employee names to the successful penetration of security measures.

/pdf/undermining-social-engineering-using-open-source-iou77bmwhx.pdf

Undermining: social engineering using open source intelligence gathering

Due to the rapidly and continued evolving nature of technology, there is a constant need to update police officers’ training in cyber security to ensure that the UK continues to be a secure place to live and do business. Rather than deliver traditional classroom-based training, our project assesses the effectiveness of the delivery of cyber security through the use of games based learning to simulate cybercrimes and provide training in incident response. The aim of our research is to transform the delivery of first responder training in tackling cybercrime.

/pdf/the-gamification-of-cybersecurity-training-2nnl35qm4a.pdf

The Gamification of Cybersecurity Training

There is a distinct communication gap between the software engineering and cybersecurity communities when it comes to addressing reoccurring security problems, known as vulnerabilities. Many vulnerabilities are caused by software errors that are created by software developers. Insecure software development practices are common due to a variety of factors, which include inefficiencies within existing knowledge transfer mechanisms based on vulnerability databases (VDBs), software developers perceiving security as an afterthought, and lack of consideration of security as part of the software development lifecycle (SDLC). The resulting communication gap also prevents developers and security experts from successfully sharing essential security knowledge. The cybersecurity community makes their expert knowledge available in forms including vulnerability databases such as CAPEC and CWE, and pattern catalogues such as Security Patterns, Attack Patterns, and Software Fault Patterns. However, these sources are not effective at providing software developers with an understanding of how malicious hackers can exploit vulnerabilities in the software systems they create. As developers are familiar with pattern-based approaches, this paper proposes the use of Vulnerability Anti-Patterns (VAP) to transfer usable vulnerability knowledge to developers, bridging the communication gap between security experts and software developers. The primary contribution of this paper is twofold: (1) it proposes a new pattern template – Vulnerability Anti-Pattern – that uses anti-patterns rather than patterns to capture and communicate knowledge of existing vulnerabilities, and (2) it proposes a catalogue of Vulnerability Anti-Patterns (VAP) based on the most commonly occurring vulnerabilities that software developers can use to learn how malicious hackers can exploit errors in software.

/pdf/vulnerability-anti-patterns-a-timeless-way-to-capture-poor-17u8a18hk0.pdf

Vulnerability anti-patterns: a timeless way to capture poor software practices (Vulnerabilities)

\n The extant literature has demonstrated that there is a need for more empirical research on the subject of policing cybercrime. This article makes a contribution and offers a qualitative exploration of the problem of policing cybercrime from an international perspective. It structures the analysis around three main challenges: the knowledge, forensic, and legal challenges. A literature review supports the evidence that these issues are core challenges when policing cybercrime. Through 13 semi-structured interviews with cybercrime specialists from 8 countries, these three challenges are further investigated. A thematic analysis of the interviews, whilst confirming some of the previous literature findings, also outlines novel findings. Interview analysis shows that in some areas little recent progress has been made, in particular the recording of cybercrime. However, in other areas new creative solutions have been implemented, including filling the policing skills gap with civilian specialists. The article concludes by offering recommendations for addressing some of the challenges for policing cybercrime.

Natalie Coull

Papers

Emergent requirements for supporting introductory programming

Undermining: social engineering using open source intelligence gathering

The Gamification of Cybersecurity Training

Vulnerability anti-patterns: a timeless way to capture poor software practices (Vulnerabilities)

A Qualitative Exploratory Study of the Knowledge, Forensic, and Legal Challenges from the Perspective of Police Cybercrime Specialists