Secure development tool adoption in open-source

Authors:
Jim Witschey
Affiliations:
North Carolina State University, Raleigh, NC, USA
Venue:
Proceedings of the 2013 companion publication for conference on Systems, programming, & applications: software for humanity
Year:
2013

Citing 9
Cited 0

Qualitative Methods in Empirical Studies of Software Engineering

IEEE Transactions on Software Engineering
Diffusing Software-Engineering Methods

IEEE Software
Static Analysis for Security

IEEE Security and Privacy
Finding bugs is easy

ACM SIGPLAN Notices
The Security Development Lifecycle

The Security Development Lifecycle
Software Security

IEEE Security and Privacy
Are Companies Actually Using Secure Development Life Cycles?

Computer
Building secure software: better than protecting bad software

IEEE Software
Socio-PLT: principles for programming language adoption

Proceedings of the ACM international symposium on New ideas, new paradigms, and reflections on programming and software

Quantified Score

Hi-index	0.00

Visualization

Abstract

Although the use of secure software development tools can help developers build more secure software, many developers do not use these tools. In previous work, a colleague conducted interviews with professional developers to develop a qualitative model of factors that influence developers' decisions to use or not use security tools. In the work described in this abstract, I conducted interviews with open-source software developers to evaluate how our findings generalize outside of corporate software development populations. With the data from these interviews, I aim to gain insight into open-source software developers' behavior and values. I aim to refine, expand, and generalize our security tool adoption model so it may be used to foster wider adoption of security tools.