English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

To build secure software, developers often work together during softwaredevelopment and maintenance to find, fix, and prevent security vulnerabilities.Examining the nature of developer interactions during their security activitiesregarding security introducing and fixing activities can provide insights forimproving current practices.  In this work, we conduct a large-scale empirical study to characterize andunderstand developers' interactions during their security activities regardingsecurity introducing and fixing, which involves more than 16K security fixingcommits and over 28K security introducing commits from nine large-scaleopen-source software projects. For our analysis, we first examine whether aproject is a hero-centric project when assessing developers' contribution intheir security activities. Then we study the interaction patterns betweendevelopers, explore how the distribution of the patterns changes over time, andstudy the impact of developers' interactions on the quality of projects. Inaddition, we also characterize the nature of developer interaction in securityactivities in comparison to developer interaction in non-security activities(i.e., introducing and fixing non-security bugs). Among our findings weidentify that: most of the experimental projects are non hero-centric projectswhen evaluating developers' contribution by using their security activities;there exist common dominating interaction patterns across our experimentalprojects; the distribution of interaction patterns has correlation with thequality of software projects. We believe the findings from this study can helpdevelopers understand how vulnerabilitiesoriginate and fix under theinteractions of software developers.

Characterizing and Understanding Software Developer Networks in Security Development