Empirical Research for Software Security

Foundations and Experience

Lotfi ben Othmane, Martin Gilje Jaatun, Edgar Weippl, Lotfi ben Othmane, Martin Gilje Jaatun, Edgar Weippl

• Publisher: CRC Press
• Year: 2017
• eBook ISBN: 9781351650885
• Topic: Computer Science
• Subtopic: Computer Engineering
• Index: Computer Science

Developing secure software requires the integration of numerous methods and tools into the development process, and software design is based on shared expert knowledge, claims, and opinions. Empirical methods, including data analytics, allow extracting knowledge and insights from the data that organizations collect from their processes and tools, and from the opinions of the experts who practice these processes and methods. This book introduces the reader to the fundamentals of empirical research methods, and demonstrates how these methods can be used to hone a secure software development lifecycle based on empirical data and published best practices.

Table of contents

• Cover
• Half Title
• Title Page
• Copyright Page
• Table of Contents
• Preface
• List of Figures
• List of Tables
• Contributors
• 1 Empirical Research on Security and Privacy by Design
• 2 Guidelines for Systematic Mapping Studies in Security Engineering
• 3 An Introduction to Data Analytics for Software Security
• 4 Generating Software Security Knowledge Through Empirical Methods
• 5 Visual Analytics: Foundations and Experiences in Malware Analysis
• 6 Analysis of Metrics for Classification Accuracy in Intrusion Detection
• 7 The Building Security in Maturity Model as a Research Tool
• 8 Agile Test Automation for Web Applications — A Security Perspective
• 9 Benchmark for Empirical Evaluation of Web Application Anomaly Detectors
• 10 Threats to Validity in Empirical Software Security Research
• Index