Talking about Security with Professional Developers

Lopez, Tamara; Sharp, Helen; Tun, Thein; Bandara, Arosha; Levine, Mark and Nuseibeh, Bashar (2019). Talking about Security with Professional Developers. In: 7th International Workshop Series on Conducting Empirical Studies in Industry (CESSER-IP), 28 May 2019, Montréal, Canada.

Abstract

This paper describes materials developed to engage professional developers in discussions about security. First, the work is framed in the context of ethnographic studies of software development, highlighting how the method is used to explore and investigate research aims for the Motivating Jenny research project. A description is given of a series of practitioner engagements, that were used to develop a reflection and discussion tool using security stories taken from media and internet sources. An explanation is given for how the tool has been used to collect data within field sites, offering a way to clarify and member check findings, and to provide a different view on practice and process. The report concludes with observations and notes about future aims for supporting and encouraging professionals to engage with security in practice.

Viewing alternatives

Item Actions

Export

You can export this page using these formats

About

• Item ORO ID
• 59840
• Item Type
• Conference or Workshop Item
• Project Funding Details

• Funded Project Name	Project ID	Funding Body
  Motivating Jenny to write secure code: community and culture of coding	Not Set	NCSC National Cyber Security Centre

• Extra Information
• Joint International Workshop on Conducting Empirical Studies in Industry (CESI 2019) and 6th International Workshop on Software Engineering Research and Industrial Practice (SER&IP 2019). CESSER-IP is co-located with ICSE 2019.
• Keywords
• secure software development; collaborative environments; empirical studies
• Academic Unit or School
• Faculty of Science, Technology, Engineering and Mathematics (STEM)
  Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications
• Research Group
• Centre for Research in Computing (CRC)
  Software Engineering and Design (SEAD)
• Copyright Holders
• © 2019 IEEE
• Related URLs
• • http://cesi-workshops.org/cesser-ip2019/(Other)
• Depositing User
• Tamara Lopez