一句话:研究移动应用开发者安全决策背后的理由,尤其关注缺乏组织支持的独立与小团队开发者。
论文关注移动应用安全失败背后的开发者决策动因。已有研究已揭示移动应用中安全缺陷的多样表现、后果,以及开发者如何引入或加剧这些问题,但为何开发者会做出最终增强或削弱安全性的选择,其背后的理由仍不清楚。该问题在现代应用开发群体日益多样化背景下更复杂:越来越多独立开发者、单人开发者或小团队开发者,缺乏大型软件公司所拥有的组织结构与支持。摘要主要提出这一研究缺口,强调需要理解这些开发者的决策逻辑;未给出具体方法、数据或结论。
Research has established the wide variety of security failures in mobile apps, their consequences, and how app developers introduce or exacerbate them. What is not well known is why developers do so---what is the rationale underpinning the decisions they make which eventually strengthen or weaken app security? This is all the more complicated in modern app development's increasingly diverse demographic: growing numbers of independent, solo, or small team developers who do not have the organizational structures and support that larger software development houses enjoy.
@inproceedings{paperbot5576,
title = {Schrödinger's security},
author = {Dirk van der Linden and Pauline Anthonysamy and Bashar Nuseibeh and Thein Than Tun and Marian Petre and Mark Levine and John Towse and Awais Rashid},
booktitle = {ICSE},
year = {2020},
doi = {10.1145/3377811.3380394}
}