Previous research suggests that developers often struggle using low-level cryptographic
APIs and, as a result, produce insecure code. When asked, developers desire, among other …

Potentially dangerous cryptography errors are well-documented in many applications.
Conventional wisdom suggests that many of these errors are caused by cryptographic …

While cryptography is now readily available to everyone and can, provably, protect private
information from attackers, we still frequently hear about major data leakages, many of which …

[Background] Previous research has shown that developers commonly misuse cryptography
APIs.[Aim] We have conducted an exploratory study to find out how crypto APIs are used in …

Rather than recognizing software engineers' limitations, modern security practice has
created an adversarial relationship between security software designers and the developers …

While researchers have developed many tools, techniques, and protocols for improving
software security, exploits and breaches are only becoming more frequent. Some of this gap …

To protect sensitive data processed by current applications, developers, whether security
experts or not, have to rely on cryptography. While cryptography algorithms have become …

Having ciphers that provide confidentiality and authenticity, that are fast in software and
efficient in hardware, these are the goals of the CAESAR authenticated encryption …

Increasingly developers are becoming aware of the importance of software security, as
frequent high-profile security incidents emphasize the need for secure code. Faced with this …

[Background] The rapidly changing business environments in which many companies
operate is challenging traditional Requirements Engineering (RE) approaches. This gave …