Sciweavers

Share
ESEM
2009
ACM

Progress report on the experimental evaluation of security inspection guidance

10 years 6 months ago
Progress report on the experimental evaluation of security inspection guidance
Although security inspections have proven to be a very efficient means for assuring software security early in the software development lifecycle, they are not used extensively because they usually need to be performed by security experts, who are few and thus expensive. Adoption of security inspections could be facilitated if one could encapsulate the expertise and experience of security experts as guidance for security inspections performed by software developers. Our approach to addressing this challenge consists of two different kinds of reading support that provide the required guidance to software developers: Vulnerability Inspection Diagram (VID) and Security Inspection Scenario (SIS). In this article, we sketch our initial experimental evaluation of VIDs and SIS with a group of software developers of an industrial project partner. We present the setup and the experiment's results. In addition, we describe the implications of our results on future work regarding the approa...
Frank Elberzhager, Marek Jawurek, Christian Jung,
Added 28 May 2010
Updated 28 May 2010
Type Conference
Year 2009
Where ESEM
Authors Frank Elberzhager, Marek Jawurek, Christian Jung, Alexander Klaus
Comments (0)
books