Secure coding practices in Java: challenges and vulnerabilities

Na Meng, Stefan Nagy, Danfeng (Daphne) Yao, Wenjie Zhuang, Gustavo A. Arango-Argoty

Abstract

The Java platform and its third-party libraries provide useful features to facilitate secure coding. However, misusing them can cost developers time and effort, as well as introduce security vulnerabilities in software. We conducted an empirical study on StackOverflow posts, aiming to understand developers' concerns on Java secure coding, their programming obstacles, and insecure coding practices.

BibTeX

@inproceedings{Meng-al:ICSE18,
  author    = {Na Meng and
               Stefan Nagy and
               Danfeng (Daphne) Yao and
               Wenjie Zhuang and
               Gustavo A. Arango{-}Argoty},
  title     = {Secure coding practices in Java: challenges and vulnerabilities},
  booktitle = {ICSE},
  pages     = {372--383},
  publisher = {{ACM}},
  year      = {2018},
}

Secure coding practices in Java: challenges and vulnerabilities

Abstract

Related papers