Why do programmers make security errors?
Authors:
- 1 September 2011
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 19436092,p. 161-164
Abstract
A large number of software security vulnerabilities are caused by software errors that are committed by software developers. We believe that interactive tool support will play an important role in aiding software developers to develop more secure software. However, an in-depth understanding of how and why software developers produce security bugs is needed to design such tools. We conducted a semi-structured interview study on 15 professional software developers to understand their perceptions and behaviors related to software security. Our results reveal a disconnect between developers' conceptual understanding of security and their attitudes regarding their personal responsibility and practices for software security.Keywords
This publication has 5 references indexed in Scilit:
- Two studies of opportunistic programming2009
- Debugging reinvented2008
- Investigation of IS professionals’ intention to practise secure development of applicationsInternational Journal of Human-Computer Studies, 2006
- Dynamic Taint Propagation for Java2006
- A framework and methodology for studying the causes of software errors in programming systemsJournal of Visual Languages & Computing, 2005