Can I read Characteristics of the Vulnerable Code Changes Identified Through Peer Code Review on EtoBox?

Characteristics of the Vulnerable Code Changes Identified Through Peer Code Review by Amiangshu Bosu is a scholarly article available to read on EtoBox.

What is Characteristics of the Vulnerable Code Changes Identified Through Peer Code Review about?

To effectively utilize the efforts of scarce security experts, this study aims to provide empirical evidence about the characteristics of security vulnerabilities. Using a three-stage, manual analysis of peer code review data from 10 popular Open Source Software (OSS) projects, this study identified 413 potentially vulnerable code changes (VCC). Some key results include: 1) the most experienced contributors authored the majority of the VCCs, 2) while less experienced authors wrote fewer VCCs, their code changes were 1.5 to 24 times more likely to be vulnerable, 3) employees of the organization sponsoring the OSS projects are more likely to write VCCs.

Author

Amiangshu Bosu

Publisher

ACM

Published

2014

Language

EN