Incorporating security into software development in small and medium-sized enterprises
(SMEs) is an increasingly relevant challenge and a crucial necessity, especially in an …

Implementing access control policies is an error-prone task that can have severe
consequences for the security of software applications. Model-driven approaches have been …

Threat modeling is considered an essential first step for" secure by design" development.
Significant prior work and industry efforts have created novel methods for this type of threat …

Malware analysis is the process of identifying whether certain software is malicious and
determining its capabilities. Unfortunately, malware authors have developed increasingly …

When studying how software developers perform security tasks, researchers often ask
participants to write code. These studies can be challenging because programming can be …

The cybersecurity workforce lacks diversity; the field is predominately men and White or
Asian, with only 10% identifying as women, Latine, or Black. Previous studies identified …

In the study of software security many factors must be considered. Once venturing beyond
the simplest of laboratory experiments, the researcher is obliged to contend with …

Given the difficulties of secure development, studying software developers remains pivotal.
However, conducting these studies remains a pain point for the security community as …

This thesis investigates the persistent challenges leading to the failure of developers in
constructing secure software systems. Employing a systematic literature review, the research …

One approach to teaching computer security in undergraduate computer science (CS)
programs is to enforce and distribute it across the curriculum. Topics accessible at even the …