Schrödinger's Security : Opening the Box on App Developers' Security Rationale
- Submitting institution
-
University of Bristol
- Unit of assessment
- 11 - Computer Science and Informatics
- Output identifier
- 219703907
- Type
- E - Conference contribution
- DOI
-
10.1145/3377811.3380394
- Title of conference / published proceedings
- ICSE '20: Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering
- First page
- 149
- Volume
- -
- Issue
- -
- ISSN
- 2574-1926
- Open access status
- Exception within 3 months of publication
- Month of publication
- June
- Year of publication
- 2020
- URL
-
-
- Supplementary information
-
-
- Request cross-referral to
- -
- Output has been delayed by COVID-19
- No
- COVID-19 affected output statement
- -
- Forensic science
- No
- Criminology
- No
- Interdisciplinary
- No
- Number of additional authors
-
7
- Research group(s)
-
B - Cybersecurity and Cryptography
- Citation count
- -
- Proposed double-weighted
- No
- Reserve for an output with double weighting
- No
- Additional information
- First study to identify that mobile app developers rarely reason about security when writing software - and critically when they do so, it is only when they focus one code and not other software development activities, e.g., choosing advertisement libraries or testing which also have a major impact. Collaboration with Google (Anthonysamy; co-author); lecture at first UK PhD Winter School on Cyber Security (120 attendees); seminar at University of York; part of panel discussion at RISCS Secure Development Workshop (online); feeding into policy through Secure Development Practices theme in RISCS: EPSRC-NCSC Research Institute on Sociotechnical Cyber Security.
- Author contribution statement
- -
- Non-English
- No
- English abstract
- -