{"id":"https://openalex.org/W4221041451","doi":"https://doi.org/10.1109/msec.2022.3142337","title":"Nudging Software Developers Toward Secure Code","display_name":"Nudging Software Developers Toward Secure Code","publication_year":2022,"publication_date":"2022-03-01","ids":{"openalex":"https://openalex.org/W4221041451","doi":"https://doi.org/10.1109/msec.2022.3142337"},"language":"en","primary_location":{"id":"doi:10.1109/msec.2022.3142337","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2022.3142337","pdf_url":"https://ieeexplore.ieee.org/ielx7/8013/9740698/09740708.pdf","source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/8013/9740698/09740708.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014224000","display_name":"Felix Fischer","orcid":"https://orcid.org/0000-0002-9724-5965"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Felix Fischer","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063714878","display_name":"Jens Gro\u00dfklags","orcid":"https://orcid.org/0000-0003-1093-1282"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jens Grossklags","raw_affiliation_strings":["Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I62916508"],"apc_list":null,"apc_paid":null,"fwci":0.8484,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.69543773,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"20","issue":"2","first_page":"76","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6953099370002747},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.6751174926757812},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.615598201751709},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5572093725204468},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5453335046768188},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.513745903968811},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.466707706451416},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.45733338594436646},{"id":"https://openalex.org/keywords/code-review","display_name":"Code review","score":0.4275068938732147},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.38153547048568726},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3457295298576355},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3404965400695801},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2774110436439514},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14371183514595032}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6953099370002747},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.6751174926757812},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.615598201751709},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5572093725204468},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5453335046768188},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.513745903968811},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.466707706451416},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.45733338594436646},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.4275068938732147},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.38153547048568726},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3457295298576355},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3404965400695801},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2774110436439514},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14371183514595032},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/msec.2022.3142337","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2022.3142337","pdf_url":"https://ieeexplore.ieee.org/ielx7/8013/9740698/09740708.pdf","source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},{"id":"pmh:oai:mediatum.ub.tum.de:node/1772156","is_oa":true,"landing_page_url":"https://mediatum.ub.tum.de/1772156","pdf_url":null,"source":{"id":"https://openalex.org/S4377196330","display_name":"mediaTUM  (Technical University of Munich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I62916508","host_organization_name":"Technical University of Munich","host_organization_lineage":["https://openalex.org/I62916508"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/msec.2022.3142337","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2022.3142337","pdf_url":"https://ieeexplore.ieee.org/ielx7/8013/9740698/09740708.pdf","source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4221041451.pdf","grobid_xml":"https://content.openalex.org/works/W4221041451.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W2511044583","https://openalex.org/W2907964905","https://openalex.org/W2964144088","https://openalex.org/W2965003867","https://openalex.org/W3213232997","https://openalex.org/W4251168719","https://openalex.org/W6766499734"],"related_works":["https://openalex.org/W2182697532","https://openalex.org/W1544062218","https://openalex.org/W1964111631","https://openalex.org/W3153702491","https://openalex.org/W185550498","https://openalex.org/W2969257295","https://openalex.org/W3008981372","https://openalex.org/W2348203156","https://openalex.org/W2938801257","https://openalex.org/W4389650601"],"abstract_inverted_index":{"The":[0],"prevalence":[1],"of":[2,7],"insecure":[3,27],"code":[4,31],"is":[5],"one":[6],"the":[8,33],"main":[9],"challenges":[10],"security":[11],"experts":[12],"are":[13],"trying":[14],"to":[15,26,38],"solve.":[16],"We":[17],"study":[18],"behavioral":[19],"patterns":[20],"among":[21],"developers":[22,44],"which":[23],"largely":[24],"contribute":[25],"software\u2014googling":[28],"and":[29,42],"reusing":[30],"from":[32],"Web\u2014and":[34],"apply":[35],"nudge":[36],"theory":[37],"harness":[39],"these":[40],"behaviors":[41],"help":[43],"write":[45],"more":[46],"secure":[47],"code.":[48]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}