This innovative practice full paper describes a pilot study exploring the integration of ChatGPT, a Conversational Large Language Model (LLM), into the student learning process in software engineering education, which emphasizes principles and methodologies in software development. Focused on a software engineering class, the study examines ChatGPT as a tool for problem clarification, modeling assistance, system design feedback, and implementation support in a project on modeling, designing, and implementing a solution using finite state processes and concurrent programming in Java. A survey designed for the case study collects insights into students' experiences with ChatGPT at different stages of the project. Student feedback on using ChatGPT and their performance on the project are analyzed to understand the impact of conversational LLMs on learning outcomes and to address whether there is room for improvement in enhancing the use of conversational LLMs in software engineering education.

In introducing students to cybersecurity, it is essential to go beyond the theoretical exploration of software vulnerabilities. This paper highlights the importance of hands-on practices in cybersecurity education and introduces SecureED as a tool to facilitate practical learning of software vulnerabilities. SecureED was utilized in a secure software development course to facilitate the practical exploration of threat modeling, security requirements, vulnerability exploitation, and vulnerability mitigation. By incorporating SecureED into the curriculum, students were able to actively engage with real-world security challenges and gain a deeper understanding of the subject matter. Course performance and student feedback supported the effectiveness of SecureED for software security education. However, improvements are needed to enhance accessibility and cross-platform compatibility.

An application framework is a reusable "skeleton" application that can be specialized to develop custom applications.As microservices become more popular in the software industry, the importance of methodologies for designing microservices-oriented frameworks is increasing.However, the existing methodologies for designing application frameworks, which were developed for the monolithic environment, do not fit the microservice architecture well.To address this issue, this study extends Schmid's systematic generalization approach to enable the design of microservice-oriented application frameworks.The methodology introduces communication spots, which define the execution orders among services, and communication styles, which define the communication relationship among services, to capture the communication characteristics in microservice environments.The methodology also proposes the strategies in microservice generalization and the usage of integration patterns in transforming a microservice-oriented application into a microservice-oriented framework.The new methodology can facilitate a developer to systematically design a microserviceoriented application framework by generalizing from a microservice application.A case study is used to demonstrate how to apply the proposed methodology to design a microservice frauddetection framework.

A secure design pattern is a well-proven reusable solution to a recurring security problem that arise in specific contexts.Using secure design patterns properly can help tackle software vulnerabilities during software development.However, the lack of selection guidance of secure patterns makes it more difficult for developers to use secure design patterns than conventional design patterns.To address this issue, this paper presents a methodology of selecting the appropriate secure design patterns for software vulnerabilities formalized in anti-patterns.This methodology bridges the gap between the vulnerabilities and secure design patterns to produce a useful tool for secure software development.