1. Understanding Developer Security Archetypes
- Author
-
Ita Ryan, Klaas-Jan Stol, and Utz Roedig
- Subjects
Developer centred security ,Archetype ,System development ,Computer science ,Writing ,Software security ,Conferences ,Developer security ,Data science ,Code (semiotics) ,Tools ,Software security assurance ,Homogeneous ,Systematics ,Developer ,Key (cryptography) ,Training ,Position paper ,Software system ,Software systems ,Human factors - Abstract
As software systems penetrate our everyday lives, security has risen to be a key concern. Despite decades of research leading to new tools and practices for writing secure code, achieving security as a key attribute remains highly challenging. We observe that much of the literature considers developers to be homogeneous and interchangeable. The differing circumstances of developers that might play a role in the writing of secure code have not been clearly defined. In this position paper we introduce the concept of developer security archetypes. Specifically, we suggest two key factors: developersâ personal interest in security, and the support that developers receive from their environment. Together, these two dimensions define four archetypes which can be uniquely characterized. By distinguishing developer archetypes, we seek to better understand how developers perceive security-related issues in systems development, as well as how to better support them.
- Published
- 2021