On the public citation graph
Developers Need Support, Too: A Survey of Security Advice for Software Developers
0 signed · 114 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1109/icse.2015.76openalex-snapshot
Tricorder: Building a Program Analysis Ecosystem
inferredcites →https://doi.org/10.1109/msp.2014.70openalex-snapshot
Improving App Privacy: Nudging App Developers to Protect User Privacy
inferredcites →https://doi.org/10.1109/sp.2016.25openalex-snapshot
You Get Where You're Looking for: The Impact of Information Sources on Code Security
inferredcites →https://doi.org/10.1109/sp.2017.31openalex-snapshot
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security
inferredcites →https://doi.org/10.1109/sp.2017.52openalex-snapshot
Comparing the Usability of Cryptographic APIs
inferredcites →https://doi.org/10.1109/vlhcc.2011.6070393openalex-snapshot
Why do programmers make security errors?
inferredcites →https://doi.org/10.1145/2501604.2501617openalex-snapshot
On the ecological validity of a password study
inferredcites →https://doi.org/10.1145/2508859.2516655openalex-snapshot
Rethinking SSL development in an appified world
inferredcites →https://doi.org/10.1145/2970276.2970330openalex-snapshot
Evaluating the evaluations of code recommender systems: a reality check
inferredcites →https://doi.org/10.2307/2288384openalex-snapshot
Content Analysis: An Introduction to its Methodology.
inferredcites →https://doi.org/10.4135/9781071878781openalex-snapshot
Content Analysis: An Introduction to Its Methodology
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1002/smr.70083openalex-snapshot
Empowering Software Engineers to Design More Secure Web Applications: Guidelines and Potential of Using LLMs as a Recommender Tool
inferred← citeshttps://doi.org/10.1002/spe.3072openalex-snapshot
Synthesizing secure software development activities for linear and agile lifecycle models
inferred← citeshttps://doi.org/10.1002/spe.3175openalex-snapshot
Toward a readiness model for secure software coding
inferred← citeshttps://doi.org/10.1002/spy2.199openalex-snapshot
Investigating the role of usable security in developers' intention toward security enhancement in service‐oriented applications
inferred← citeshttps://doi.org/10.1007/978-3-030-26834-3_13openalex-snapshot
API Usability of Stateful Signature Schemes
inferred← citeshttps://doi.org/10.1007/978-3-030-55958-8openalex-snapshot
Socio-Technical Aspects in Security and Trust
inferred← citeshttps://doi.org/10.1007/978-3-030-55958-8_2openalex-snapshot
“I Don’t Know Too Much About It”: On the Security Mindsets of Computer Science Students
inferred← citeshttps://doi.org/10.1007/978-3-030-58793-2_18openalex-snapshot
Design of Secure Coding Challenges for Cybersecurity Education in the Industry
inferred← citeshttps://doi.org/10.1007/978-3-030-90513-2_10openalex-snapshot
IT Security Measures and Their Relation to Data Protection
inferred← citeshttps://doi.org/10.1007/978-3-031-10539-5_6openalex-snapshot
Software Product Maintenance: A Case Study
inferred← citeshttps://doi.org/10.1007/978-3-031-28073-3_42openalex-snapshot
Python Cryptographic Secure Scripting Concerns: A Study of Three Vulnerabilities
inferred← citeshttps://doi.org/10.1007/978-3-031-52524-7_2openalex-snapshot
The Impact of the Evolution of Operating Systems on Older Web Applications
inferred← citeshttps://doi.org/10.1007/978-3-031-52643-5_76-1openalex-snapshot
Privacy and Safety Risks of Mobile Health (mHealth) Apps
inferred← citeshttps://doi.org/10.1007/978-3-031-78386-9_9openalex-snapshot
Guidelines for Supporting Software Engineers in Developing Secure Web Applications
inferred← citeshttps://doi.org/10.1007/978-3-031-89350-6_7openalex-snapshot
Small Mistakes with Big Impacts: A Study on Secure Coding Practices in Java Open Source Projects
inferred← citeshttps://doi.org/10.1007/978-981-96-5214-3_11openalex-snapshot
An OWASP-Based Security Vulnerabilities Evaluation of Solo and Small Team Developed mHealth Applications
inferred← citeshttps://doi.org/10.1007/s10664-021-10019-zopenalex-snapshot
Fixing vulnerabilities potentially hinders maintainability
inferred← citeshttps://doi.org/10.1016/b978-0-323-90045-4.00002-2openalex-snapshot
Privacy and security in digital therapeutics
inferred← citeshttps://doi.org/10.1016/j.irfa.2021.101966openalex-snapshot
Challenges of the market for initial coin offerings
inferred← citeshttps://doi.org/10.1037/tmb0000122openalex-snapshot
Recognizing the known unknowns; the interaction between reflective thinking and optimism for uncertainty among software developer’s security perceptions.
inferred← citeshttps://doi.org/10.1037/tmb0000122.suppopenalex-snapshot
Supplemental Material for Recognizing the Known Unknowns; the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer’s Security Perceptions
inferred← citeshttps://doi.org/10.1093/cybsec/tyaa007openalex-snapshot
Challenging software developers: dialectic as a foundation for security assurance techniques
inferred← citeshttps://doi.org/10.1109/access.2020.3041181openalex-snapshot
Vulnerable Code Detection Using Software Metrics and Machine Learning
inferred← citeshttps://doi.org/10.1109/access.2022.3227434openalex-snapshot
Exploring How to Apply Secure Software Design Principles
inferred← citeshttps://doi.org/10.1109/access.2025.3561220openalex-snapshot
From Reports to Actions: Bridging the Customer Usability Gap in Penetration Testing
inferred← citeshttps://doi.org/10.1109/ase56229.2023.00040openalex-snapshot
SCPatcher: Mining Crowd Security Discussions to Enrich Secure Coding Practices
inferred← citeshttps://doi.org/10.1109/chase.2019.00023openalex-snapshot
"Hopefully We Are Mostly Secure": Views on Secure Code in Professional Practice
inferred← citeshttps://doi.org/10.1109/compsac51774.2021.00165openalex-snapshot
FireBugs: Finding and Repairing Cryptography API Misuses in Mobile Applications
inferred← citeshttps://doi.org/10.1109/compsac54236.2022.00026openalex-snapshot
An Intelligent Tutoring System for API Misuse Correction by Instant Quality Feedback
inferred← citeshttps://doi.org/10.1109/conisoft63288.2024.00036openalex-snapshot
Secure Cryptography Usage in Software Development: A Systematic Literature Review
inferred← citeshttps://doi.org/10.1109/encycris59249.2023.00010openalex-snapshot
The State of Secure Coding Practice: Small Organisations and “Lone, Rogue Coders”
inferred← citeshttps://doi.org/10.1109/etncc59188.2023.10284944openalex-snapshot
Analyzing Security Vulnerabilities in Solo-Developed mHealth Applications: A Systematic Literature Review
inferred← citeshttps://doi.org/10.1109/eurospw.2019.00022openalex-snapshot
How Could Serious Games Support Secure Programming? Designing a Study Replication and Intervention
inferred← citeshttps://doi.org/10.1109/iceccme55909.2022.9988363openalex-snapshot
A Study of Risk Management Frameworks and Security Testing For Secure Software Systems
inferred← citeshttps://doi.org/10.1109/icse-seet52601.2021.00034openalex-snapshot
Is Secure Coding Education in the Industry Needed? An Investigation Through a Large Scale Survey
inferred← citeshttps://doi.org/10.1109/icse-seip66354.2025.00054openalex-snapshot
“Immediateshortterm3mthsafterthatlol”: Developer Secure-Coding Sentiment, Practice and Culture in Organisations
inferred← citeshttps://doi.org/10.1109/icse-seis.2019.00012openalex-snapshot
An Anatomy of Security Conversations in Stack Overflow
inferred← citeshttps://doi.org/10.1109/icse.2019.00033openalex-snapshot
The Seven Sins: Security Smells in Infrastructure as Code Scripts
inferred← citeshttps://doi.org/10.1109/icse48619.2023.00140openalex-snapshot
Measuring Secure Coding Practice and Culture: A Finger Pointing at the Moon is not the Moon
inferred← citeshttps://doi.org/10.1109/re.2019.00038openalex-snapshot
On the Requirements for Serious Games Geared Towards Software Developers in the Industry
inferred← citeshttps://doi.org/10.1109/secdev.2018.00019openalex-snapshot
Light-Touch Interventions to Improve Software Development Security
inferred← citeshttps://doi.org/10.1109/secdev45635.2020.00024openalex-snapshot
Coding Practices and Recommendations of Spring Security for Enterprise Applications
inferred← citeshttps://doi.org/10.1109/secdev61143.2024.00007openalex-snapshot
Designing Secure AI-based Systems: a Multi-Vocal Literature Review
inferred← citeshttps://doi.org/10.1109/sp46215.2023.10179339openalex-snapshot
"We are a startup to the core": A qualitative interview study on the security and privacy development practices in Turkish software startups
inferred← citeshttps://doi.org/10.1109/sp54263.2024.00019openalex-snapshot
"False negative - that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing
inferred← citeshttps://doi.org/10.1109/sp54263.2024.00022openalex-snapshot
Measuring the Effects of Stack Overflow Code Snippet Evolution on Open-Source Software Security
inferred← citeshttps://doi.org/10.1109/trustcom50675.2020.00055openalex-snapshot
Awareness of Secure Coding Guidelines in the Industry - A First Data Analysis
inferred← citeshttps://doi.org/10.1109/trustcom60117.2023.00145openalex-snapshot
“A method like this would be overkill”: Developers’ Perceived Issues with Privacy-preserving Computation Methods
inferred← citeshttps://doi.org/10.1109/tse.2019.2948910openalex-snapshot
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
inferred← citeshttps://doi.org/10.1109/tse.2021.3058985openalex-snapshot
A Study of C/C++ Code Weaknesses on Stack Overflow
inferred← citeshttps://doi.org/10.1109/tse.2021.3094171openalex-snapshot
“I just looked for the solution!”On Integrating Security-Relevant Information in Non-Security API Documentation to Support Secure Coding Practices
inferred← citeshttps://doi.org/10.1145/3171533.3171539openalex-snapshot
Developer-centered security and the symmetry of ignorance
inferred← citeshttps://doi.org/10.1145/3173574.3173836openalex-snapshot
Security During Application Development
inferred← citeshttps://doi.org/10.1145/3194707.3194713openalex-snapshot
An investigation of security conversations in stack overflow
inferred← citeshttps://doi.org/10.1145/3290605.3300519openalex-snapshot
'Think secure from the beginning'
inferred← citeshttps://doi.org/10.1145/3304221.3325592openalex-snapshot
"I Don't Know Too Much About It"
inferred← citeshttps://doi.org/10.1145/3383219.3383284openalex-snapshot
Software Security Specifications and Design
inferred← citeshttps://doi.org/10.1145/3442167.3442178openalex-snapshot
Putting the Sec in DevSecOps: Using Social Practice Theory to Improve Secure Software Development
inferred← citeshttps://doi.org/10.1145/3471930openalex-snapshot
The Case for Adaptive Security Interventions
inferred← citeshttps://doi.org/10.1145/3485832.3485922openalex-snapshot
A Cross-role and Bi-national Analysis on Security Efforts and Constraints of Software Development Projects
inferred← citeshttps://doi.org/10.1145/3491102.3502125openalex-snapshot
“I’m Surprised So Much Is Connected”
inferred← citeshttps://doi.org/10.1145/3530019.3535344openalex-snapshot
The Soft Skills of Software Learning Development: the Psychological Dimensions of Computing and Security Behaviours
inferred← citeshttps://doi.org/10.1145/3544548.3580705openalex-snapshot
Analyzing the Use of Public and In-house Secure Development Guidelines in U.S. and Japanese Industries
inferred← citeshttps://doi.org/10.1145/3576915.3623072openalex-snapshot
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication
inferred← citeshttps://doi.org/10.1145/3576915.3623122openalex-snapshot
Unhelpful Assumptions in Software Security Research
inferred← citeshttps://doi.org/10.1145/3579461openalex-snapshot
Beyond the Boolean: How Programmers Ask About, Use, and Discuss Gender
inferred← citeshttps://doi.org/10.1145/3589951openalex-snapshot
A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development
inferred← citeshttps://doi.org/10.1145/3611643.3613899openalex-snapshot
Analyzing Microservice Connectivity with Kubesonde
inferred← citeshttps://doi.org/10.1145/3613904.3642826openalex-snapshot
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter
inferred← citeshttps://doi.org/10.1145/3643662.3643956openalex-snapshot
Training Developers to Code Securely: Theory and Practice
inferred← citeshttps://doi.org/10.1145/3658644.3690270openalex-snapshot
A Qualitative Analysis of Practical De-Identification Guides
inferred← citeshttps://doi.org/10.1145/3688459.3688468openalex-snapshot
"Everything We Encrypt Today Could Be Cracked" — Exploring (Post) Quantum Cryptography Misconceptions
inferred← citeshttps://doi.org/10.1145/3706598.3713983openalex-snapshot
Bridging the Gap Between Usable Security Research and Open-Source Practice - Lessons From a Long-Term Engagement With VeraCrypt
inferred← citeshttps://doi.org/10.1145/3744916.3773245openalex-snapshot
Understanding DevOps Security of Google Workspace Apps
inferred← citeshttps://doi.org/10.1145/3749220openalex-snapshot
Inside Job: Defending Kubernetes Clusters Against Network Misconfigurations
inferred← citeshttps://doi.org/10.14722/usec.2022.23094openalex-snapshot
A Study on Security and Privacy Practices in Danish Companies
inferred← citeshttps://doi.org/10.21427/7fnh-2871openalex-snapshot
Detection of Software Vulnerability Communication in Expert Social Media Channels: A Data-driven Approach
inferred← citeshttps://doi.org/10.2196/15654openalex-snapshot
Challenges With Developing Secure Mobile Health Applications: Systematic Review
inferred← citeshttps://doi.org/10.22215/etd/2018-13347openalex-snapshot
The Human Dimension of Software Security and Factors Affecting Security Processes
inferred← citeshttps://doi.org/10.22215/etd/2022-15268openalex-snapshot
On Security Best Practices, Systematic Analysis of Security Advice, and Internet of Things Devices
inferred← citeshttps://doi.org/10.26226/morressier.613b5418842293c031b5b608openalex-snapshot
Fixing Vulnerabilities Potentially Hinders Maintainability
inferred← citeshttps://doi.org/10.26686/wgtn.13088357openalex-snapshot
Information Security in Agile Software Development Projects: A Critical Success Factor Perspective
inferred← citeshttps://doi.org/10.26686/wgtn.13088357.v1openalex-snapshot
Information Security in Agile Software Development Projects: A Critical Success Factor Perspective
inferred← citeshttps://doi.org/10.31234/osf.io/pexvzopenalex-snapshot
Can you hear the ROAR of software security? How Responsibility, Optimism And Risk shape developers’ security perceptions
inferred← citeshttps://doi.org/10.31234/osf.io/v7fqbopenalex-snapshot
Software Vulnerabilities as Cognitive Blindspots; assessing the suitability of a dual processing theory of decision making for secure coding
inferred← citeshttps://doi.org/10.32604/cmc.2022.019289openalex-snapshot
Security Threat and Vulnerability Assessment and Measurement in Secure Software Development
inferred← citeshttps://doi.org/10.3390/e21121196openalex-snapshot
A Survey on Using Kolmogorov Complexity in Cybersecurity
inferred← citeshttps://doi.org/10.3390/electronics10131606openalex-snapshot
Android Mobile Malware Detection Using Machine Learning: A Systematic Review
inferred← citeshttps://doi.org/10.3390/electronics9071077openalex-snapshot
Bitcoin’s APIs in Open-Source Projects: Security Usability Evaluation
inferred← citeshttps://doi.org/10.4018/978-1-6684-3702-5.ch098openalex-snapshot
Towards a Security Competence of Software Developers
inferred← citeshttps://doi.org/10.4018/978-1-6684-4291-3.ch016openalex-snapshot
Increasing Developer Awareness of Java Secure Coding in the Industry
inferred← citeshttps://doi.org/10.4018/978-1-7998-3149-5.ch005openalex-snapshot
Towards a Security Competence of Software Developers
inferred← citeshttps://doi.org/10.4018/979-8-3693-2897-2.ch005openalex-snapshot
Big Data Management and Analytics in Drug Research
inferred← citeshttps://doi.org/10.48550/arxiv.1606.01881openalex-snapshot
Build It, Break It, Fix It: Contesting Secure Development
inferred← citeshttps://doi.org/10.48550/arxiv.1806.06881openalex-snapshot
CryptoGuard: High Precision Detection of Cryptographic Vulnerabilities in Massive-sized Java Projects
inferred← citeshttps://doi.org/10.48550/arxiv.2104.03476openalex-snapshot
Secure Software Engineering in the Financial Services: A Practitioners' Perspective
inferred← citeshttps://doi.org/10.48550/arxiv.2309.00744openalex-snapshot
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication
inferred← citeshttps://doi.org/10.5121/csit.2021.112322openalex-snapshot
Checklist Usage in Secure Software Development
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.