We use cookies to offer you the best possible website experience. This includes cookies necessary for the website's operation. Additionally, you can freely decide and change any time whether you accept cookies or choose to opt out of cookies to improve website's performance, as well as cookies used to display content tailored to your interests. Your experience of the site and the services we are able to offer may be impacted if you do not accept all cookies. The Fraunhofer-Gesellschaft www.
Around 32 employees work with an annual research budget of 3. At the Β»ZukunftsmeileΒ« in Paderborn, Germany, we conduct practical research to develop innovative solutions for mechanical and plant engineering, the automotive industry and related sectors. The focus is on intelligent products, production systems, services and software applications. Given the barriers to traditional training methods such as insufficient time and resources, other industries have explored alternative learning models such as micro-learning.
In this learning model, the content is broken into smaller pieces so that learners can quickly learn and apply new skills in real-world situations using interactive elements and gamification. Software security trainings could possibly benefit from such a training approach by supporting tailored learning experiences based on the needs and schedules of the software developers.
With recent advances in Large Language Models LLMs and their use for code generation, completion, explanation, refactoring and other software engineering tasks, exploring their application for also training software developers is worth further investigation. Pairing the capabilities of LLMs in understanding and generating natural language with software security training materials could possibly provide micro-training solutions for developers within their Integration Development Environment IDE.
Such an approach would be useful in providing software developers with the direct support that they need, when a security vulnerability is detected in code that they push or also while developing new software components that might be susceptible to certain vulnerability vectors. Developers would be supported both in the preventative and post vulnerability detection phases so that new skills can be applied in real-world situations quicker, therefore increasing the learning outcomes.
