loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2009 3rd International Symposium on Empirical Software Engineering and Measurement
Progress report on the experimental evaluation of security inspection guidance
Lake Buena Vista, FL, USA
October 15-October 16
ISBN: 978-1-4244-4842-5
Frank Elberzhager, Fraunhofer Institute for Experimental Software Engineering Kaiserslautern, Germany
Marek Jawurek, Fraunhofer Institute for Experimental Software Engineering Kaiserslautern, Germany
Christian Jung, Fraunhofer Institute for Experimental Software Engineering Kaiserslautern, Germany
Alexander Klaus, Fraunhofer Institute for Experimental Software Engineering Kaiserslautern, Germany
Although security inspections have proven to be a very efficient means for assuring software security early in the software development lifecycle, they are not used extensively because they usually need to be performed by security experts, who are few and thus expensive. Adoption of security inspections could be facilitated if one could encapsulate the expertise and experience of security experts as guidance for security inspections performed by software developers. Our approach to addressing this challenge consists of two different kinds of reading support that provide the required guidance to software developers: Vulnerability Inspection Diagram (VID) and Security Inspection Scenario (SIS). In this article, we sketch our initial experimental evaluation of VIDs and SIS with a group of software developers of an industrial project partner. We present the setup and the experiment's results. In addition, we describe the implications of our results on future work regarding the approach and further evaluation.
Citation:
Frank Elberzhager, Marek Jawurek, Christian Jung, Alexander Klaus, "Progress report on the experimental evaluation of security inspection guidance," esem, pp.485-489, 2009 3rd International Symposium on Empirical Software Engineering and Measurement, 2009
Usage of this product signifies your acceptance of the Terms of Use.