On the public citation graph

You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users

https://doi.org/10.1109/secdev.2016.013
0 signed · 161 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-3-642-25867-1_6openalex-snapshot
Pico: No More Passwords!
inferredcites →https://doi.org/10.1007/978-3-642-39062-3_4openalex-snapshot
Usability Evaluation of Configuration-Based API Design Concepts
inferredcites →https://doi.org/10.1007/978-94-010-1834-0_8openalex-snapshot
Judgment under Uncertainty: Heuristics and Biases
inferredcites →https://doi.org/10.1007/s10623-015-0071-9openalex-snapshot
Quantifying the security advantage of password expiration policies
inferredcites →https://doi.org/10.1016/c2009-0-21512-1openalex-snapshot
Usability Engineering
inferredcites →https://doi.org/10.1023/a:1026586415054openalex-snapshot
Using Students as Subjects—A Comparative Study of Students and Professionals in Lead-Time Impact Assessment
inferredcites →https://doi.org/10.1037//0022-3514.48.4.890openalex-snapshot
Assumed similarity and opinion certainty.
inferredcites →https://doi.org/10.1093/intqhc/mzg031openalex-snapshot
Good practice in the conduct and reporting of survey research
inferredcites →https://doi.org/10.1108/09685220910944722openalex-snapshot
An integrated view of human, organizational, and technological challenges of IT security management
inferredcites →https://doi.org/10.1109/icse.2007.85openalex-snapshot
The Factory Pattern in API Design: A Usability Evaluation
inferredcites →https://doi.org/10.1109/mic.2014.108openalex-snapshot
The Effectiveness of Security Images in Internet Banking
inferredcites →https://doi.org/10.1109/msp.2013.134openalex-snapshot
More Is Not the Answer
inferredcites →https://doi.org/10.1109/msp.2016.111openalex-snapshot
Developers are Not the Enemy!: The Need for Usable Security APIs
inferredcites →https://doi.org/10.1109/sp.2007.35openalex-snapshot
The Emperor's New Security Indicators
inferredcites →https://doi.org/10.1109/sp.2016.18openalex-snapshot
Helping Johnny to Analyze Malware: A Usability-Optimized Decompiler and Malware Analysis User Study
inferredcites →https://doi.org/10.1109/sp.2016.24openalex-snapshot
I Think They're Trying to Tell Me Something: Advice Sources and Selection for Digital Security
inferredcites →https://doi.org/10.1109/sp.2016.25openalex-snapshot
You Get Where You're Looking for: The Impact of Information Sources on Code Security
inferredcites →https://doi.org/10.1109/tit.1976.1055638openalex-snapshot
New directions in cryptography
inferredcites →https://doi.org/10.1109/vlhcc.2012.6344511openalex-snapshot
Usable results from the field of API usability: A systematic mapping and further analysis
inferredcites →https://doi.org/10.1145/1073001.1073003openalex-snapshot
Johnny 2
inferredcites →https://doi.org/10.1145/1143120.1143123openalex-snapshot
An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench
inferredcites →https://doi.org/10.1145/1176617.1176622openalex-snapshot
How to design a good API and why it matters
inferredcites →https://doi.org/10.1145/1255421.1255422openalex-snapshot
API: Design Matters
inferredcites →https://doi.org/10.1145/1280680.1280687openalex-snapshot
Usability of anonymous web browsing
inferredcites →https://doi.org/10.1145/1280680.1280693openalex-snapshot
Towards understanding IT security professionals and their tools
inferredcites →https://doi.org/10.1145/1453101.1453117openalex-snapshot
The implications of method placement on API learnability
inferredcites →https://doi.org/10.1145/1506409.1506424openalex-snapshot
API design matters
inferredcites →https://doi.org/10.1145/1572532.1572552openalex-snapshot
How users use access control
inferredcites →https://doi.org/10.1145/1595676.1595691openalex-snapshot
The developer is the enemy
inferredcites →https://doi.org/10.1145/1866307.1866328openalex-snapshot
The security of modern password expiration
inferredcites →https://doi.org/10.1145/1978942.1979321openalex-snapshot
Of passwords and people
inferredcites →https://doi.org/10.1145/2076732.2076770openalex-snapshot
ASIDE
inferredcites →https://doi.org/10.1145/2333112.2333114openalex-snapshot
Graphical passwords
inferredcites →https://doi.org/10.1145/2335356.2335358openalex-snapshot
Measuring user confidence in smartphone security and privacy
inferredcites →https://doi.org/10.1145/2335356.2335371openalex-snapshot
Helping Johnny 2.0 to encrypt his Facebook conversations
inferredcites →https://doi.org/10.1145/2382196.2382204openalex-snapshot
The most dangerous code in the world
inferredcites →https://doi.org/10.1145/2501604.2501609openalex-snapshot
Confused Johnny
inferredcites →https://doi.org/10.1145/2501604.2501610openalex-snapshot
Your attention please
inferredcites →https://doi.org/10.1145/2501604.2501617openalex-snapshot
On the ecological validity of a password study
inferredcites →https://doi.org/10.1145/2508859.2516655openalex-snapshot
Rethinking SSL development in an appified world
inferredcites →https://doi.org/10.1145/2508859.2516693openalex-snapshot
An empirical study of cryptographic misuse in android applications
inferredcites →https://doi.org/10.1145/2508859.2516726openalex-snapshot
Measuring password guessability for an entire university
inferredcites →https://doi.org/10.1145/2556288.2557275openalex-snapshot
Betrayed by updates
inferredcites →https://doi.org/10.1145/2660267.2660311openalex-snapshot
Hey, NSA
inferredcites →https://doi.org/10.1145/2702123.2702442openalex-snapshot
Improving SSL Warnings
inferredcites →https://doi.org/10.1145/2858036.2858267openalex-snapshot
The Anatomy of Smartphone Unlocking
inferredcites →https://doi.org/10.1145/2858036.2858400openalex-snapshot
"We're on the Same Page"
inferredcites →https://doi.org/10.1145/2896587openalex-snapshot
Improving API usability
inferredcites →https://doi.org/10.1145/3036699.3036712openalex-snapshot
THE ANATOMY OF SMARTPHONE UNLOCKING
inferredcites →https://doi.org/10.1145/322796.322806openalex-snapshot
Users are not the enemy
inferredcites →https://doi.org/10.1145/357980.358017openalex-snapshot
A method for obtaining digital signatures and public-key cryptosystems
inferredcites →https://doi.org/10.1145/359340.359342openalex-snapshot
A method for obtaining digital signatures and public-key cryptosystems
inferredcites →https://doi.org/10.1184/r1/6470528.v1openalex-snapshot
The Privacy and Security Behaviors of Smartphone App Developers
inferredcites →https://doi.org/10.1184/r1/6620651openalex-snapshot
A Framework for Reasoning About the Human in the Loop
inferredcites →https://doi.org/10.1184/r1/6621806openalex-snapshot
Crying Wolf: An Empirical Study of SSL Warning Effectiveness
inferredcites →https://doi.org/10.14722/usec.2014.23006openalex-snapshot
The Privacy and Security Behaviors of Smartphone App Developers
inferredcites →https://doi.org/10.14722/usec.2015.23015openalex-snapshot
A First Look at the Usability of Bitcoin Key Management
inferredcites →https://doi.org/10.48550/arxiv.1510.08554openalex-snapshot
"We're on the Same Page": A Usability Study of Secure Email Using Pairs of Novice Users

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1002/9781119644682.biblioopenalex-snapshot
Bibliography
inferred← citeshttps://doi.org/10.1002/spy2.55openalex-snapshot
Game theoretical analysis of usable security and privacy
inferred← citeshttps://doi.org/10.1007/978-3-030-55958-8openalex-snapshot
Socio-Technical Aspects in Security and Trust
inferred← citeshttps://doi.org/10.1007/978-3-030-55958-8_2openalex-snapshot
“I Don’t Know Too Much About It”: On the Security Mindsets of Computer Science Students
inferred← citeshttps://doi.org/10.1007/978-3-030-55958-8_8openalex-snapshot
Moving to Client-Side Hashing for Online Authentication
inferred← citeshttps://doi.org/10.1007/978-3-030-57404-8_19openalex-snapshot
Exploring the Meaning of “Usable Security”
inferred← citeshttps://doi.org/10.1007/978-3-030-71522-9_1578openalex-snapshot
Developer-Centred Security
inferred← citeshttps://doi.org/10.1007/978-3-031-06975-8_17openalex-snapshot
Usability Insights from Establishing TLS Connections
inferred← citeshttps://doi.org/10.1007/978-3-031-10539-5_6openalex-snapshot
Software Product Maintenance: A Case Study
inferred← citeshttps://doi.org/10.1007/978-3-031-92882-6_4openalex-snapshot
“We’ve Met Some Problems”: Developers’ Issues with Privacy-Preserving Computation Techniques on Stack Overflow
inferred← citeshttps://doi.org/10.1007/978-3-642-27739-9_1578-1openalex-snapshot
Developer-Centred Security
inferred← citeshttps://doi.org/10.1007/s10664-018-9673-yopenalex-snapshot
Security code smells in Android ICC
inferred← citeshttps://doi.org/10.1007/s13278-023-01171-zopenalex-snapshot
Cybersecurity discussions in Stack Overflow: a developer-centred analysis of engagement and self-disclosure behaviour
inferred← citeshttps://doi.org/10.1016/j.cose.2018.09.007openalex-snapshot
Why Johnny can’t develop a secure application? A usability analysis of Java Secure Socket Extension API
inferred← citeshttps://doi.org/10.1016/j.cose.2019.101605openalex-snapshot
A data minimization model for embedding privacy into software systems
inferred← citeshttps://doi.org/10.1016/j.infsof.2019.07.007openalex-snapshot
Using cognitive dimensions to evaluate the usability of security APIs: An empirical investigation
inferred← citeshttps://doi.org/10.1016/j.jss.2024.112144openalex-snapshot
GDPR compliance via software evolution: Weaving security controls in software design
inferred← citeshttps://doi.org/10.1016/j.tele.2018.05.012openalex-snapshot
Understanding user privacy expectations: A software developer’s perspective
inferred← citeshttps://doi.org/10.1037/tmb0000122openalex-snapshot
Recognizing the known unknowns; the interaction between reflective thinking and optimism for uncertainty among software developer’s security perceptions.
inferred← citeshttps://doi.org/10.1037/tmb0000122.suppopenalex-snapshot
Supplemental Material for Recognizing the Known Unknowns; the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer’s Security Perceptions
inferred← citeshttps://doi.org/10.1080/10447318.2021.1949134openalex-snapshot
Prototyping Usable Privacy and Security Systems: Insights from Experts
inferred← citeshttps://doi.org/10.1080/10447318.2022.2041894openalex-snapshot
Design Evolution of a Tool for Privacy and Security Protection for Activists Online: Cyberactivist
inferred← citeshttps://doi.org/10.1093/cybsec/tyaf005openalex-snapshot
Software security in practice: knowledge and motivation
inferred← citeshttps://doi.org/10.1108/ics-10-2020-0167openalex-snapshot
Exploring the meaning of usable security – a literature review
inferred← citeshttps://doi.org/10.1108/ics-11-2020-0184openalex-snapshot
How do non experts think about cyber attack consequences?
inferred← citeshttps://doi.org/10.1109/chase.2019.00023openalex-snapshot
"Hopefully We Are Mostly Secure": Views on Secure Code in Professional Practice
inferred← citeshttps://doi.org/10.1109/cyber-rci55324.2022.10032675openalex-snapshot
Insecure Software on a Fragmenting Internet
inferred← citeshttps://doi.org/10.1109/dsc63325.2024.00031openalex-snapshot
Enhanced Analysis of Cryptographic Library Usage Patterns and Trends in Android Applications
inferred← citeshttps://doi.org/10.1109/encycris52570.2021.00013openalex-snapshot
Understanding Developer Security Archetypes
inferred← citeshttps://doi.org/10.1109/iccist67338.2025.11438336openalex-snapshot
A Smart Collaborative Platform for Streamlined Team Management and Workflow Optimization
inferred← citeshttps://doi.org/10.1109/icse-seip66354.2025.00054openalex-snapshot
“Immediateshortterm3mthsafterthatlol”: Developer Secure-Coding Sentiment, Practice and Culture in Organisations
inferred← citeshttps://doi.org/10.1109/icse-seis.2019.00012openalex-snapshot
An Anatomy of Security Conversations in Stack Overflow
inferred← citeshttps://doi.org/10.1109/ms.2019.2945300openalex-snapshot
Taking the Middle Path: Learning About Security Through Online Social Interaction
inferred← citeshttps://doi.org/10.1109/msec.2022.3205484openalex-snapshot
Eight Lightweight Usable Security Principles for Developers
inferred← citeshttps://doi.org/10.1109/msec.2024.3431278openalex-snapshot
Advocating a Policy Push Toward Inclusive and Secure “Digital-First” Societies
inferred← citeshttps://doi.org/10.1109/scam.2017.24openalex-snapshot
Security Smells in Android
inferred← citeshttps://doi.org/10.1109/secdev51306.2021.00023openalex-snapshot
Developers Are Neither Enemies Nor Users: They Are Collaborators
inferred← citeshttps://doi.org/10.1109/sp46214.2022.9833756openalex-snapshot
How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study
inferred← citeshttps://doi.org/10.1109/spw54247.2022.9833858openalex-snapshot
Measuring Developers’ Web Security Awareness from Attack and Defense Perspectives
inferred← citeshttps://doi.org/10.1109/trustcom60117.2023.00145openalex-snapshot
“A method like this would be overkill”: Developers’ Perceived Issues with Privacy-preserving Computation Methods
inferred← citeshttps://doi.org/10.1109/vlhcc.2018.8506525openalex-snapshot
Supporting Effective Strategies for Resolving Vulnerabilities Reported by Static Analysis Tools
inferred← citeshttps://doi.org/10.1145/3171533.3171539openalex-snapshot
Developer-centered security and the symmetry of ignorance
inferred← citeshttps://doi.org/10.1145/3194707.3194713openalex-snapshot
An investigation of security conversations in stack overflow
inferred← citeshttps://doi.org/10.1145/3209811.3209818openalex-snapshot
Examining Security and Privacy Research in Developing Regions
inferred← citeshttps://doi.org/10.1145/3210459.3210484openalex-snapshot
Why developers cannot embed privacy into software systems?
inferred← citeshttps://doi.org/10.1145/3243734.3243794openalex-snapshot
Investigating System Operators' Perspective on Security Misconfigurations
inferred← citeshttps://doi.org/10.1145/3287056openalex-snapshot
Coconut
inferred← citeshttps://doi.org/10.1145/3290605.3300519openalex-snapshot
'Think secure from the beginning'
inferred← citeshttps://doi.org/10.1145/3313831.3376142openalex-snapshot
Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs
inferred← citeshttps://doi.org/10.1145/3319008.3319350openalex-snapshot
An Empirical Usability Analysis of the Google Authentication API
inferred← citeshttps://doi.org/10.1145/3320269.3384761openalex-snapshot
What risk? I don't understand. An Empirical Study on Users' Understanding of the Terms Used in Security Texts
inferred← citeshttps://doi.org/10.1145/3364224openalex-snapshot
Will They Use It or Not? Investigating Software Developers’ Intention to Follow Privacy Engineering Methodologies
inferred← citeshttps://doi.org/10.1145/3372297.3417264openalex-snapshot
A Performant, Misuse-Resistant API for Primality Testing
inferred← citeshttps://doi.org/10.1145/3377811.3380387openalex-snapshot
One size does not fit all
inferred← citeshttps://doi.org/10.1145/3450965openalex-snapshot
Privacy Laws and Privacy by Design Schemes for the Internet of Things
inferred← citeshttps://doi.org/10.1145/3460120.3484763openalex-snapshot
The Effect of Google Search on Software Security: Unobtrusive Security Interventions via Content Re-ranking
inferred← citeshttps://doi.org/10.1145/3485832.3485922openalex-snapshot
A Cross-role and Bi-national Analysis on Security Efforts and Constraints of Software Development Projects
inferred← citeshttps://doi.org/10.1145/3544548.3580705openalex-snapshot
Analyzing the Use of Public and In-house Secure Development Guidelines in U.S. and Japanese Industries
inferred← citeshttps://doi.org/10.1145/3544548.3581178openalex-snapshot
A Usability Evaluation of AFL and libFuzzer with CS Students
inferred← citeshttps://doi.org/10.1145/3571850openalex-snapshot
Blindspots in Python and Java APIs Result in Vulnerable Code
inferred← citeshttps://doi.org/10.1145/3580880openalex-snapshot
PARROT
inferred← citeshttps://doi.org/10.1145/3584318.3584323openalex-snapshot
From Utility to Capability: A New Paradigm to Conceptualize and Develop Inclusive PETs
inferred← citeshttps://doi.org/10.1145/3616383openalex-snapshot
A First Look into Software Security Practices in Bangladesh
inferred← citeshttps://doi.org/10.1145/3634737.3637647openalex-snapshot
Towards Understanding and Improving Security-Relevant Web Application Logging
inferred← citeshttps://doi.org/10.1145/3658644.3670333openalex-snapshot
Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers
inferred← citeshttps://doi.org/10.1145/3658644.3690270openalex-snapshot
A Qualitative Analysis of Practical De-Identification Guides
inferred← citeshttps://doi.org/10.1145/3678588openalex-snapshot
Empowering IoT Developers with Privacy-Preserving End-User Development Tools
inferred← citeshttps://doi.org/10.1145/3706598.3713983openalex-snapshot
Bridging the Gap Between Usable Security Research and Open-Source Practice - Lessons From a Long-Term Engagement With VeraCrypt
inferred← citeshttps://doi.org/10.1145/3727967.3756849openalex-snapshot
Persona-driven approach to enhance security requirement elicitation
inferred← citeshttps://doi.org/10.1145/3803869.3803883openalex-snapshot
Teaching Usable Privacy in HCI Education: Designing, Implementing, and Evaluating an Active Learning Graduate Course
inferred← citeshttps://doi.org/10.1145/3820253.3820268openalex-snapshot
"How do security threats affect my work?" - Software Developers’ Mental Models of IT Security Threats and Mitigation Strategies
inferred← citeshttps://doi.org/10.1177/14614448241270541openalex-snapshot
“Track every move”: Analyzing developers’ privacy discourse in GitHub README files
inferred← citeshttps://doi.org/10.13016/m2b853k5popenalex-snapshot
Ethics Emerging: The Story of Privacy and Security Perceptions in Virtual Reality
inferred← citeshttps://doi.org/10.14236/ewic/hci2018.198openalex-snapshot
Faceless Internet Lawyers – Can They Be Trusted? A study of Usable Security for Legal Services
inferred← citeshttps://doi.org/10.14722/eurousec.2017.23015openalex-snapshot
I Do and I Understand. Not Yet True for Security APIs. So Sad
inferred← citeshttps://doi.org/10.14722/eurousec.2017.23016openalex-snapshot
Can Johnny build a protocol? Co-ordinating developer and user intentions for privacy-enhanced secure messaging protocols
inferred← citeshttps://doi.org/10.14722/eurousec.2018.23010openalex-snapshot
Consolidating Principles and Patterns for Human-centred Usable Security Research and Development
inferred← citeshttps://doi.org/10.14722/usec.2022.23094openalex-snapshot
A Study on Security and Privacy Practices in Danish Companies
inferred← citeshttps://doi.org/10.1561/3300000026openalex-snapshot
The Security & Privacy Acceptance Framework (SPAF)
inferred← citeshttps://doi.org/10.1561/9781680839654openalex-snapshot
Tracking on the Web, Mobile and the Internet of Things
inferred← citeshttps://doi.org/10.17485/ijst/v13i26.848openalex-snapshot
Challenges and limitations in secure software development adoption - A qualitative analysis in Malaysian software industry prospect
inferred← citeshttps://doi.org/10.22215/etd/2018-13347openalex-snapshot
The Human Dimension of Software Security and Factors Affecting Security Processes
inferred← citeshttps://doi.org/10.24251/hicss.2019.877openalex-snapshot
Fighting Against XSS Attacks. A Usability Evaluation of OWASP ESAPI Output Encoding
inferred← citeshttps://doi.org/10.24251/hicss.2021.241openalex-snapshot
Human Factors in Automating Cyber Operations
inferred← citeshttps://doi.org/10.3389/fpsyg.2023.1135369openalex-snapshot
In their own words: deception detection by victims and near victims of fraud
inferred← citeshttps://doi.org/10.3390/bdcc8110162openalex-snapshot
Usable Privacy and Security in Mobile Applications: Perception of Mobile End Users in Saudi Arabia
inferred← citeshttps://doi.org/10.3390/electronics9071077openalex-snapshot
Bitcoin’s APIs in Open-Source Projects: Security Usability Evaluation
inferred← citeshttps://doi.org/10.3390/info16030247openalex-snapshot
Digital Transformation in Governmental Public Service Provision and Usable Security Perception in Saudi Arabia
inferred← citeshttps://doi.org/10.3390/jcp2020015openalex-snapshot
Towards Agile Cybersecurity Risk Management for Autonomous Software Engineering Teams
inferred← citeshttps://doi.org/10.47749/t/unicamp.2017.993696openalex-snapshot
Towards the safe development of cryptographic software
inferred← citeshttps://doi.org/10.48550/arxiv.1805.09485openalex-snapshot
Why developers cannot embed privacy into software systems? An empirical investigation
inferred← citeshttps://doi.org/10.48550/arxiv.1808.01479openalex-snapshot
Understanding Software Developers' Approach towards Implementing Data Minimization
inferred← citeshttps://doi.org/10.48550/arxiv.1903.01950openalex-snapshot
Pyronia: Intra-Process Access Control for IoT Applications
inferred← citeshttps://doi.org/10.48550/arxiv.1907.13245openalex-snapshot
EnclaveDom: Privilege Separation for Large-TCB Applications in Trusted Execution Environments
inferred← citeshttps://doi.org/10.48550/arxiv.2007.08613openalex-snapshot
Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign
inferred← citeshttps://doi.org/10.48550/arxiv.2104.03476openalex-snapshot
Secure Software Engineering in the Financial Services: A Practitioners' Perspective
inferred← citeshttps://doi.org/10.48550/arxiv.2104.04030openalex-snapshot
A Mixed-method Study on Security and Privacy Practices in Danish Companies
inferred← citeshttps://doi.org/10.48550/arxiv.2309.00744openalex-snapshot
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication
inferred← citeshttps://doi.org/10.56553/popets-2023-0051openalex-snapshot
How Website Owners Face Privacy Issues: Thematic Analysis of Responses from a Covert Notification Study Reveals Diverse Circumstances and Challenges
inferred← citeshttps://doi.org/10.56553/popets-2024-0010openalex-snapshot
“Those things are written by lawyers, and programmers are reading that.” Mapping the Communication Gap Between Software Developers and Privacy Experts
inferred← citeshttps://doi.org/10.5753/sbseg.2017.19488openalex-snapshot
A Longitudinal and Retrospective Study on How Developers Misuse Cryptography in Online Communities
inferred← citeshttps://doi.org/10.7892/boris.113128openalex-snapshot
Security Smells in Android
inferred← citeshttps://doi.org/10.7892/boris.126932openalex-snapshot
Security Code Smells in Android ICC
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.