Research output per year
Research output per year
Project Details
Description
Developing software is no longer the domain of the select few with deep technical skills, training and knowledge. A wide range of people from diverse backgrounds are developing software for smart phones, websites and IoT devices used by millions of people. Johnny is our pseudonymous for such a developer. Currently, little is understood about the security behaviours and decision-making processes of Johnny engaging in software development.
The overall aim of this EPSRC-funded project is to develop an empirically-grounded theory of secure software development by the masses. Our focus is on understanding:
- what typical classes of security vulnerabilities arise from Johnny's mistakes;
- why these mistakes occur; and
- how we may mitigate these issues and promote secure behaviours.
The overall aim of this EPSRC-funded project is to develop an empirically-grounded theory of secure software development by the masses. Our focus is on understanding:
- what typical classes of security vulnerabilities arise from Johnny's mistakes;
- why these mistakes occur; and
- how we may mitigate these issues and promote secure behaviours.
| Status | Finished |
|---|---|
| Effective start/end date | 1/10/18 → 31/12/21 |
| Links | https://www.writingsecuresoftware.org/ |
Research Groups and Themes
- Cyber Security
Fingerprint
Explore the research topics touched on by this project. These labels are generated based on the underlying awards/grants. Together they form a unique fingerprint.
Research output
-
Embedding Privacy Into Design Through Software Developers: Challenges & Solutions
Tahaei, M., Vaniea, K. & Rashid, A., 1 Feb 2023, In: IEEE Security and Privacy. 21, 1, p. 49-57 9 p.Research output: Contribution to journal › Article (Academic Journal) › peer-review
Open AccessFile12 Citations (Scopus)28 Downloads (Pure) -
Building a Privacy Testbed: Use Cases and Design Considerations
Gardiner, J., Das Chowdhury, P., Halsey, J., Tahaei, M., Elahi, T. & Rashid, A., 8 Feb 2022, Computer Security. ESORICS 2021 International Workshops. Springer, (Lecture Notes in Computer Science).Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)
1 Citation (Scopus) -
Influences of developers' perspectives on their engagement with security in code
Rashid, A., Nuseibeh, B., Rauf, I., Lopez, T., Sharp, H., Levine, M., Towse, J., Tun, T., Petre, M. & van der Linden, D., 19 Jul 2022, CHASE '22: Proceedings of the 15th International Conference on Cooperative and Human Aspects of Software Engineering. Association for Computing Machinery, p. 86-95Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)
Open Access5 Citations (Scopus)
Projects
- 1 Active
-
Equitable Privacy
Rashid, A. (Principal Investigator), Liveley, G. (Principal Investigator), Ramokapane, M. (Co-Investigator), Ajmeri, N. (Co-Investigator), Coles-Kemp, L. (Co-Investigator), Huan, R. (Researcher) & Patnaik, N. (Researcher)
1/09/22 → 28/02/26
Project: Research, Parent