Publication

Back to overview

Worrisome Patterns in Developers: A Survey in Cryptography

Type of publication Peer-reviewed
Publikationsform Proceedings (peer-reviewed)
Author Hazhirpasand Mohammadreza, Ghafari Mohammad, Nierstrasz Oscar,
Project Agile Software Assistance
Show all

Proceedings (peer-reviewed)

Page(s) 185 - 190
Title of proceedings 2021 36th IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW)
DOI 10.1109/asew52652.2021.00045

Open Access

URL http://scg.unibe.ch/archive/papers/Hazh21d.pdf
Type of Open Access Repository (Green Open Access)

Abstract

We surveyed 97 developers who had used cryptography in open-source projects, in the hope of identifying developer security and cryptography practices. We asked them about individual and company-level practices, and divided respondents into three groups (i.e., high, medium, and low) based on their level of knowledge. We found differences between the high-profile developers and the other two groups. For instance, high-profile developers have more years of experience in programming, have attended more security and cryptography courses, have more background in security, are highly concerned about security, and tend to use security tools more than the other two groups. Nevertheless, we observed worrisome patterns among all participants such as the high usage of unreliable sources like Stack Overflow, and the low rate of security tool usage.
-