Understanding the How and the Why-Reference-Cited by-同舟云学术

Understanding the How and the Why

Published:2022-11-07 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Fulton Kelsey R.¹,Votipka Daniel²,Abrokwa Desiree¹,Mazurek Michelle L.¹,Hicks Michael³,Parker James⁴

Affiliation:

1. University of Maryland, College Park, MD, USA

2. Tufts University, Medford, MA, USA

3. University of Maryland and Amazon, College Park, MD, USA

4. Galois, Inc., Portland, OR, USA

Funder

National Science Foundation

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3548606.3560569

Reference78 articles.

1. Comparing the Usability of Cryptographic APIs

2. You Get Where You're Looking for: The Impact of Information Sources on Code Security

3. Nikolaos Alexopoulos , Manuel Brack , Jan Philipp Wagner , Tim Grube , and Max Mühlhäuser . 2022 . How Long Do Vulnerabilities Live in the Code? A {Large-Scale} Empirical Measurement Study on {FOSS} Vulnerability Lifetimes . In 31st USENIX Security Symposium (USENIX Security 22) . 359--376. Nikolaos Alexopoulos, Manuel Brack, Jan Philipp Wagner, Tim Grube, and Max Mühlhäuser. 2022. How Long Do Vulnerabilities Live in the Code? A {Large-Scale} Empirical Measurement Study on {FOSS} Vulnerability Lifetimes. In 31st USENIX Security Symposium (USENIX Security 22). 359--376.

4. Noura Alomar , Primal Wijesekera , Edward Qiu , and Serge Egelman . 2020 . " You've got your nice list of bugs, now what?" vulnerability discovery and management processes in the wild . In Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020). 319--339. Noura Alomar, Primal Wijesekera, Edward Qiu, and Serge Egelman. 2020. "You've got your nice list of bugs, now what?" vulnerability discovery and management processes in the wild. In Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020). 319--339.

5. Nuno Antunes and Marco Vieira. 2009. Comparing the effectiveness of penetration testing and static code analysis on the detection of sql injection vulnerabilities in web services. In 2009 15th IEEE pacific rim international symposium on dependable computing. IEEE 301--306. Nuno Antunes and Marco Vieira. 2009. Comparing the effectiveness of penetration testing and static code analysis on the detection of sql injection vulnerabilities in web services. In 2009 15th IEEE pacific rim international symposium on dependable computing. IEEE 301--306.

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Is Modeling Access Control Worth It?;Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security;2023-11-15