“ImmediateShortTerm3MthsAfterThatLOL”: Developer secure-coding sentiment, practice and culture in organisations

Simple item page
dc.contributor.authorRyan, Itaen
dc.contributor.authorRoedig, Utzen
dc.contributor.authorStol, Klaas-Janen
dc.contributor.funderScience Foundation Irelanden
dc.date.accessioned2025-02-07T14:54:48Z
dc.date.available2025-02-07T14:54:48Z
dc.date.issued2025-05en
dc.description.abstractAs almost all areas of human endeavour undergo rapid digital transformation, secure coding is increasingly important to personal, commercial and national security. Yet studies have shown that software developers do not always prioritise or even understand security. Our large survey of organically sourced coders (n=863) examines how software developers currently experience secure coding in the workplace. We found that developers express an interest in secure coding, display basic security knowledge, and turn to their managers and teams first for help with security concerns. We found that developer secure coding sentiment and security practice do not correlate with organisational statistics such as size, but do correlate weakly with measures of security culture, indicating that organisational security support goes hand-in-hand with secure development. Most developers would look for help in-house if they had security concerns. Investigating the effects of code breaches, we found that for almost half of cases, code security does not increase, or increases only for a short time.en
dc.description.sponsorshipScience Foundation Ireland (13/RC/2094-P2)en
dc.description.statusPeer revieweden
dc.description.versionAccepted Versionen
dc.format.mimetypeapplication/pdfen
dc.identifier.citationRyan, I., Roedig, U. and Stol, K.-J. (2025) '“ImmediateShortTerm3MthsAfterThatLOL”: Developer secure-coding sentiment, practice and culture in organisations', 47th International Conference on Software Engineering (ICSE 2025), 27 April - 3 May, Ottawa, Canada.en
dc.identifier.endpage12en
dc.identifier.startpage1en
dc.identifier.urihttps://hdl.handle.net/10468/17008
dc.language.isoenen
dc.relation.ispartof47th International Conference on Software Engineering (ICSE 2025), 27 April - 3 May, Ottawa, Canada.en
dc.relation.project13/RC/2094-P2en
dc.relation.projectinfo:eu-repo/grantAgreement/SFI/SFI Centres for Research Training Programme::Data and ICT Skills for the Future/18/CRT/6222/IE/SFI Centre for Research Training in Advanced Networks for Sustainable Societies/en
dc.rights© 2025, the Authors. For the purpose of Open Access, the authors have applied a CC-BY public copyright license to any Author Accepted Manuscript version arising from this submission.en
dc.rights.urihttps://creativecommons.org/licenses/by/4.0/en
dc.subjectRapid digital transformationen
dc.subjectSecure codingen
dc.title“ImmediateShortTerm3MthsAfterThatLOL”: Developer secure-coding sentiment, practice and culture in organisationsen
dc.typeConference itemen
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
icse-seip-2025.pdf
Size:
323.79 KB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
license.txt
Size:
2.71 KB
Format:
Item-specific license agreed upon to submission
Description:
Download
Collections
Computer Science - Conference Items