How Practitioners Assess Software System Security

Abstract

Despite progress in software security, there is still a limited understanding of how to measure and evaluate it comprehensively. However, developers and security analysts have to regularly assess software security and respond to issues. To shed light on their practices and perceptions, in this work, we qualitatively investigate how practitioners assess software security and make related decisions.

Authors 2

1. Arina Kudriavtseva Aachen

   Leiden University

   Affiliation as printed

   LIACS, Leiden University, Leiden, Netherlands

2. Olga Gadyatskaya Aachen

   Leiden University

   Affiliation as printed

   LIACS, Leiden University, Leiden, Netherlands