2026 ASEE Annual Conference & Exposition

WIP: Using Gamification to Introduce DevSecOps Concepts to Software Engineering Students

Presented at Software Engineering Division (SWED) Technical Session 3

DevSecOps is a paradigm that integrates security practices throughout the DevOps pipeline, fostering shared responsibility among development, operations, and security teams. While essential in modern software engineering, these concepts—along with Agile methodologies and risk management—are often abstract and difficult for undergraduate students to grasp. This paper introduces BuildOps, a gamified learning tool designed to engage students with DevSecOps principles through interactive play. Extending the Agile App Security Game, BuildOps addresses the limitations of fixed scenarios by incorporating stochastic sprint outcomes, dynamic attack events, and prioritization trade‑offs between feature delivery and security debt. The activity simulates real‑world development, requiring players to balance sprint planning and risk mitigation while working within resource constraints. We detail the evolution of BuildOps from prototyping to pilots in a cybersecurity summer camp, a junior‑level DevSecOps course, and a general software engineering course. Preliminary results indicate that gamification significantly enhances engagement and comprehension. Future work will explore industry validation, scalability, and formal assessment strategies to quantify learning gains.

Authors
  1. Dr. Walter W Schilling Jr. Milwaukee School of Engineering [biography]
Download paper (1.15 MB)

Are you a researcher? Would you like to cite this paper? Visit the ASEE document repository at peer.asee.org for more tools and easy citations.

» Download paper

« View session

For those interested in:

  • computer science
  • engineering
  • professional
  • undergraduate