Why do programmers make security errors?

Proceedings - 2011 IEEE Symposium on Visual Languages and Human Centric Computing, VL/HCC 2011

Volumn , Issue , 2011, Pages 161-164

  Xie, Jing ^a   Lipford, Heather Richter ^a   Chu, Bill ^a  

^a University of North Carolina at Charlotte   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONCEPTUAL UNDERSTANDING; IN-DEPTH UNDERSTANDING; INTERACTIVE TOOL; PERSONAL RESPONSIBILITY; PROFESSIONAL SOFTWARE; SECURE SOFTWARE; SECURITY BUGS; SEMI STRUCTURED INTERVIEWS; SOFTWARE DEVELOPER; SOFTWARE ERRORS; SOFTWARE SECURITY;

ERRORS; PROGRAM DEBUGGING;

SECURITY OF DATA;

EID: 82855167245     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/VLHCC.2011.6070393     Document Type: Conference Paper

References (9)

1. Microsoft. (2011) Microsoft security bulletin. [Online]. Available: http://www.microsoft.com/technet/security/bulletin/
2. SAFECode.org. (2008) Fundamental practices for secure software development. [Online]. Available: http://www.safecode.org/publications/
3. Symantec. (2008) Symantec internet security threat report: Trends for july-december 2007 (executive summary). [Online]. Available: http://eval.symantec.com/mktginfo/enterprise/white-papers/
4. M. G. Graff and K. R. V. Wyk, Secure Coding: Principles and Practices. O'Reilly & Associates, Inc., 2003.
5. A. J. Ko and B. A. Myers, "A framework and methodology for studying the causes of software errors in programming systems," J. Vis. Lang. Comput., vol. 16, no. 1-2, pp. 41-84, 2005.
6. A. J. Ko and B. A. Myers, "Debugging reinvented: asking and answering why and why not questions about program behavior," in Proceedings of the 30th international conference on Software engineering, ser. ICSE '08. New York, NY, USA: ACM, 2008, pp. 301-310.
7. V. Haldar, D. Chandra, and M. Franz, "Dynamic taint propagation for java," in ACSAC '05: Proceedings of the 21st Annual Computer Security Applications Conference. IEEE Computer Society, 2005, pp. 303-311.
8. I. M. Y. Woon and A. Kankanhalli, "Investigation of is professionals' intention to practise secure development of applications," Int. J. Hum.-Comput. Stud., vol. 65, pp. 29-41, January 2007. (Pubitemid 44780140)
9. J. Brandt, P. J. Guo, J. Lewenstein, M. Dontcheva, and S. R. Klemmer, "Two studies of opportunistic programming: interleaving web foraging, learning, and writing code," in Proceedings of the 27th international conference on Human factors in computing systems, ser. CHI '09. ACM, 2009, pp. 1589-1598.