{"id":"https://openalex.org/W2888959482","doi":null,"title":"Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic {API} Misuse","display_name":"Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic {API} Misuse","publication_year":2018,"publication_date":"2018-08-01","ids":{"openalex":"https://openalex.org/W2888959482","mag":"2888959482"},"language":"en","primary_location":{"id":"pmh:oai:pub.h-brs.de:5560","doi":null,"is_oa":false,"landing_page_url":"https://pub.h-brs.de/frontdoor/index/index/docId/5560","pdf_url":null,"source":{"id":"https://openalex.org/S4306400385","display_name":"Publication Server of Bonn-Rhein-Sieg University of Applied Sciences (Bonn-Rhein-Sieg University of Applied Sciences)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I135140700","host_organization_name":"University of Bonn","host_organization_lineage":["https://openalex.org/I135140700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the Fourteenth Symposium on Usable Privacy and Security, August 12\u201314, 2018, Baltimore, MD, USA","raw_type":"conferenceobject"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043448995","display_name":"Peter Leo Gorski","orcid":"https://orcid.org/0000-0003-0391-4054","observed_orcids":["https://orcid.org/0000-0003-0391-4054"]},"institutions":[{"id":"https://openalex.org/I102520234","display_name":"TH K\u00f6ln - University of Applied Sciences","ror":"https://ror.org/014nnvj65","country_code":"DE","type":"education","lineage":["https://openalex.org/I102520234"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Peter Leo Gorski","raw_affiliation_strings":["TH Koeln"],"raw_orcid":"https://orcid.org/0000-0003-0391-4054","affiliations":[{"raw_affiliation_string":"TH Koeln","institution_ids":["https://openalex.org/I102520234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037591969","display_name":"Luigi Lo Iacono","orcid":"https://orcid.org/0000-0002-7863-0622","observed_orcids":["https://orcid.org/0000-0002-7863-0622"]},"institutions":[{"id":"https://openalex.org/I102520234","display_name":"TH K\u00f6ln - University of Applied Sciences","ror":"https://ror.org/014nnvj65","country_code":"DE","type":"education","lineage":["https://openalex.org/I102520234"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Luigi Lo Iacono","raw_affiliation_strings":["TH Koeln"],"raw_orcid":"https://orcid.org/0000-0002-7863-0622","affiliations":[{"raw_affiliation_string":"TH Koeln","institution_ids":["https://openalex.org/I102520234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004650891","display_name":"Dominik Wermke","orcid":"https://orcid.org/0009-0008-2921-1254","observed_orcids":["https://orcid.org/0009-0008-2921-1254"]},"institutions":[{"id":"https://openalex.org/I114112103","display_name":"Leibniz University Hannover","ror":"https://ror.org/0304hq317","country_code":"DE","type":"education","lineage":["https://openalex.org/I114112103"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dominik Wermke","raw_affiliation_strings":["Leibniz University, Hannover"],"raw_orcid":"https://orcid.org/0009-0008-2921-1254","affiliations":[{"raw_affiliation_string":"Leibniz University, Hannover","institution_ids":["https://openalex.org/I114112103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045617887","display_name":"Christian Stransky","orcid":"https://orcid.org/0000-0002-7942-5372","observed_orcids":["https://orcid.org/0000-0002-7942-5372"]},"institutions":[{"id":"https://openalex.org/I114112103","display_name":"Leibniz University Hannover","ror":"https://ror.org/0304hq317","country_code":"DE","type":"education","lineage":["https://openalex.org/I114112103"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Stransky","raw_affiliation_strings":["Leibniz University, Hannover"],"raw_orcid":"https://orcid.org/0000-0002-7942-5372","affiliations":[{"raw_affiliation_string":"Leibniz University, Hannover","institution_ids":["https://openalex.org/I114112103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075001284","display_name":"Sebastian M\u00f6ller","orcid":"https://orcid.org/0000-0003-3057-0760","observed_orcids":["https://orcid.org/0000-0003-3057-0760"]},"institutions":[{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sebastian M\u00f6ller","raw_affiliation_strings":["TU Berlin;"],"raw_orcid":"https://orcid.org/0000-0003-3057-0760","affiliations":[{"raw_affiliation_string":"TU Berlin;","institution_ids":["https://openalex.org/I4577782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074668699","display_name":"Yasemin Acar","orcid":"https://orcid.org/0000-0001-7167-7383","observed_orcids":["https://orcid.org/0000-0001-7167-7383"]},"institutions":[{"id":"https://openalex.org/I114112103","display_name":"Leibniz University Hannover","ror":"https://ror.org/0304hq317","country_code":"DE","type":"education","lineage":["https://openalex.org/I114112103"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yasemin Acar","raw_affiliation_strings":["Leibniz University, Hannover"],"raw_orcid":"https://orcid.org/0000-0001-7167-7383","affiliations":[{"raw_affiliation_string":"Leibniz University, Hannover","institution_ids":["https://openalex.org/I114112103"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087356408","display_name":"Sascha Fahl","orcid":"https://orcid.org/0000-0002-5644-3316","observed_orcids":["https://orcid.org/0000-0002-5644-3316"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sascha Fahl","raw_affiliation_strings":["Ruhr-Univ. Bochum"],"raw_orcid":"https://orcid.org/0000-0002-5644-3316","affiliations":[{"raw_affiliation_string":"Ruhr-Univ. Bochum","institution_ids":["https://openalex.org/I904495901"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.8468,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.94989241,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"265","last_page":"281"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.4860999882221222,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.4860999882221222,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.1543000042438507,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1387999951839447,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptographic-api-misuse","display_name":"cryptographic API misuse","score":0.996999979019165},{"id":"https://openalex.org/keywords/security-warnings","display_name":"security warnings","score":0.6769999861717224},{"id":"https://openalex.org/keywords/encryption-algorithms","display_name":"encryption algorithms","score":0.39800000190734863},{"id":"https://openalex.org/keywords/key-size","display_name":"key size","score":0.9269999861717224},{"id":"https://openalex.org/keywords/modes-of-operation","display_name":"modes of operation","score":0.9509999752044678},{"id":"https://openalex.org/keywords/hash-algorithms","display_name":"hash algorithms","score":0.906000018119812},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.5360000133514404},{"id":"https://openalex.org/keywords/developer-guidance","display_name":"developer guidance","score":0.46299999952316284},{"id":"https://openalex.org/keywords/online-experiments","display_name":"online experiments","score":0.4410000145435333}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7704560160636902},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6368069648742676},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6311137676239014},{"id":"https://openalex.org/C2779955035","wikidata":"https://www.wikidata.org/wiki/Q4686785","display_name":"Advice (programming)","level":2,"score":0.6006361246109009},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.5225272178649902},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.4804936647415161},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.472177654504776},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:pub.h-brs.de:5560","doi":null,"is_oa":false,"landing_page_url":"https://pub.h-brs.de/frontdoor/index/index/docId/5560","pdf_url":null,"source":{"id":"https://openalex.org/S4306400385","display_name":"Publication Server of Bonn-Rhein-Sieg University of Applied Sciences (Bonn-Rhein-Sieg University of Applied Sciences)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I135140700","host_organization_name":"University of Bonn","host_organization_lineage":["https://openalex.org/I135140700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the Fourteenth Symposium on Usable Privacy and Security, August 12\u201314, 2018, Baltimore, MD, USA","raw_type":"conferenceobject"},{"id":"mag:2888959482","doi":null,"is_oa":false,"landing_page_url":"https://www.usenix.org/system/files/conference/soups2018/soups2018-gorski.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421005","display_name":"Symposium On Usable Privacy and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Symposium On Usable Privacy and Security","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4388483369","https://openalex.org/W2978283677","https://openalex.org/W2698406033","https://openalex.org/W3005198370","https://openalex.org/W3157188769","https://openalex.org/W4296131189","https://openalex.org/W3030213528","https://openalex.org/W2899231924","https://openalex.org/W2811259613","https://openalex.org/W4321766352"],"abstract_inverted_index":{"Cryptographic":[0],"API":[1,110,208],"misuse":[2,111,209],"is":[3],"responsible":[4,161],"for":[5],"a":[6,41,81,91],"large":[7],"number":[8],"of":[9,22,44,62,102,137,148,174,192,206],"software":[10,71],"vulnerabilities.":[11],"In":[12,90],"many":[13],"cases":[14],"developers":[15,72,212],"are":[16],"overburdened":[17],"by":[18],"the":[19,100,121,146,152,160,175,179,188,199,203],"complex":[20],"set":[21,43],"programming":[23,115],"choices":[24,130],"and":[25,53,112,139,190,197,210],"their":[26,183],"security":[27,104,153,162,180,195],"implications.":[28],"Past":[29],"studies":[30],"have":[31],"identified":[32],"significant":[33],"challenges":[34,191],"when":[35],"using":[36],"cryptographic":[37,88,129,207],"APIs":[38],"that":[39,166],"lack":[40],"certain":[42],"usability":[45],"features":[46],"(e.g.":[47],"easy-to-use":[48],"documentation":[49,144],"or":[50],"meaningful":[51],"warning":[52],"error":[54],"messages)":[55],"leading":[56],"to":[57,120,126,158,201],"an":[58,109],"especially":[59],"high":[60],"likelihood":[61],"writing":[63,74],"functionally":[64],"correct":[65],"but":[66],"insecure":[67,128,184],"code.":[68,185,216],"To":[69],"support":[70],"in":[73,145],"more":[75,214],"secure":[76,114,215],"code,":[77],"this":[78],"work":[79],"investigates":[80],"novel":[82],"approach":[83,168],"aimed":[84],"at":[85],"these":[86],"hard-to-use":[87],"APIs.":[89],"controlled":[92],"online":[93],"experiment":[94],"with":[95,142],"53":[96],"participants,":[97],"we":[98],"study":[99],"effectiveness":[101],"API-integrated":[103,194],"advice":[105,154,181,196],"which":[106],"informs":[107],"about":[108],"places":[113],"hints":[116],"as":[117],"guidance":[118],"close":[119],"developer.":[122],"This":[123],"allows":[124],"us":[125],"address":[127],"including":[131],"encryption":[132],"algorithms,":[133],"key":[134],"sizes,":[135],"modes":[136],"operation":[138],"hashing":[140],"algorithms":[141],"helpful":[143],"guise":[147],"warnings.":[149],"Whenever":[150],"possible,":[151],"proposes":[155],"code":[156,171],"changes":[157],"fix":[159],"issues.":[163],"We":[164,186],"find":[165],"our":[167],"significantly":[169],"improves":[170],"security.":[172],"73%":[173],"participants":[176],"who":[177],"received":[178],"fixed":[182],"evaluate":[187],"opportunities":[189],"adopting":[193],"illustrate":[198],"potential":[200],"reduce":[202],"negative":[204],"implications":[205],"help":[211],"write":[213]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":6}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2018-09-07T00:00:00"}