一句话:本文呼吁并探索对工业界软件安全实践的大规模客观研究,以指导开发团队、研究者与教育者。
近年来网络犯罪迅速增加,有效的软件安全活动对于防止相关危害至关重要。然而,行业对软件安全实践的实际使用情况缺乏客观研究,导致开发团队、学术研究人员和教育工作者难以聚焦其工作方向。本文标题表明其探索了世界上最大的软件安全研究,旨在将安全性融入开发过程。尽管摘要未详细说明具体方法(如调查设计、数据来源)和关键结果,但研究目标是为软件安全实践在工业界的应用提供经验证据,从而帮助相关方明确重点。该工作可能涉及对大量软件开发组织的实践进行调查与分析,为后续软件安全研究与实践提供方向性指引。
Recent years have seen rapid increases in cybercrime. The use of effective software security activities plays an important part in preventing the harm involved. Objective research on industry use of software security practices is needed to help development teams, academic researchers, and educators to focus their activities.
@inproceedings{paperbot6452,
title = {Infiltrating security into development: exploring the world’s largest software security study},
author = {Charles Weir and Sammy Migues and Mike Ware and Laurie Williams},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3473926}
}