{"id":"https://openalex.org/W4414604601","doi":"https://doi.org/10.1109/qrs65678.2025.00076","title":"How Security Coding Knowledge Impact Software Quality: An Empirical Study of Stack Overflow Security Issues","display_name":"How Security Coding Knowledge Impact Software Quality: An Empirical Study of Stack Overflow Security Issues","publication_year":2025,"publication_date":"2025-07-16","ids":{"openalex":"https://openalex.org/W4414604601","doi":"https://doi.org/10.1109/qrs65678.2025.00076"},"language":"en","primary_location":{"id":"doi:10.1109/qrs65678.2025.00076","is_oa":false,"landing_page_url":"https://doi.org/10.1109/qrs65678.2025.00076","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 25th International Conference on Software Quality, Reliability and Security (QRS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shuqi Zuo","orcid":null},"institutions":[{"id":"https://openalex.org/I78978612","display_name":"Yangzhou University","ror":"https://ror.org/03tqb8s11","country_code":"CN","type":"education","lineage":["https://openalex.org/I78978612"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuqi Zuo","raw_affiliation_strings":["School of Information Engineering, Yangzhou University,Jiangsu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Yangzhou University,Jiangsu,China","institution_ids":["https://openalex.org/I78978612"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103130004","display_name":"Qi Yang","orcid":"https://orcid.org/0000-0001-7504-3206"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Yang","raw_affiliation_strings":["School of Software Engineering, Northwestern Polytechnical University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software Engineering, Northwestern Polytechnical University,Xi'an,China","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012604938","display_name":"Tianyi Gao","orcid":null},"institutions":[{"id":"https://openalex.org/I78978612","display_name":"Yangzhou University","ror":"https://ror.org/03tqb8s11","country_code":"CN","type":"education","lineage":["https://openalex.org/I78978612"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyi Gao","raw_affiliation_strings":["School of Information Engineering, Yangzhou University,Jiangsu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Yangzhou University,Jiangsu,China","institution_ids":["https://openalex.org/I78978612"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119761519","display_name":"Zarin Tasnim Progga","orcid":null},"institutions":[{"id":"https://openalex.org/I78978612","display_name":"Yangzhou University","ror":"https://ror.org/03tqb8s11","country_code":"CN","type":"education","lineage":["https://openalex.org/I78978612"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zarin Tasnim Progga","raw_affiliation_strings":["School of Information Engineering, Yangzhou University,Jiangsu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Engineering, Yangzhou University,Jiangsu,China","institution_ids":["https://openalex.org/I78978612"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066488668","display_name":"Jinjin Shen","orcid":"https://orcid.org/0000-0002-1724-9422"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinjin Shen","raw_affiliation_strings":["School of Software Engineering, Northwestern Polytechnical University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software Engineering, Northwestern Polytechnical University,Xi'an,China","institution_ids":["https://openalex.org/I17145004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"727","last_page":"738"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9409999847412109,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9409999847412109,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.79830002784729},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.633400022983551},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.5964000225067139},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5300999879837036},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5248000025749207},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.46070000529289246},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.45089998841285706},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4117000102996826}],"concepts":[{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.79830002784729},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7085999846458435},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.633400022983551},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5968999862670898},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.5964000225067139},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5300999879837036},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5248000025749207},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.46070000529289246},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.45089998841285706},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4117000102996826},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.396699994802475},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.3188999891281128},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.310699999332428},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.30410000681877136},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.2906999886035919},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.27379998564720154},{"id":"https://openalex.org/C119024030","wikidata":"https://www.wikidata.org/wiki/Q759899","display_name":"Call stack","level":3,"score":0.273499995470047},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/qrs65678.2025.00076","is_oa":false,"landing_page_url":"https://doi.org/10.1109/qrs65678.2025.00076","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 25th International Conference on Software Quality, Reliability and Security (QRS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1979050135","https://openalex.org/W2058228389","https://openalex.org/W2104577574","https://openalex.org/W2157820602","https://openalex.org/W2511044583","https://openalex.org/W2649501556","https://openalex.org/W2767380523","https://openalex.org/W2789661710","https://openalex.org/W2796056969","https://openalex.org/W2810627707","https://openalex.org/W2899643194","https://openalex.org/W2955552127","https://openalex.org/W2962875024","https://openalex.org/W3047331473","https://openalex.org/W3085545669","https://openalex.org/W3089558885","https://openalex.org/W3090554539","https://openalex.org/W3120291408","https://openalex.org/W3121592851","https://openalex.org/W3133304533","https://openalex.org/W3133930529","https://openalex.org/W3170152309","https://openalex.org/W4226023762","https://openalex.org/W4293073258","https://openalex.org/W4313006773","https://openalex.org/W4390667250","https://openalex.org/W4394769458","https://openalex.org/W4396832043","https://openalex.org/W4402272476","https://openalex.org/W4402288754","https://openalex.org/W4402442227","https://openalex.org/W4406712335"],"related_works":[],"abstract_inverted_index":{"Stack":[0,99,118,236],"Overflow":[1,100,119,237],"has":[2],"become":[3],"one":[4],"of":[5,22,45,88,123,134,152,156,193,203],"the":[6,40,46,86,114,126,146,153,164,194,204,228,235],"most":[7],"influential":[8],"platforms":[9],"for":[10,218],"developers":[11],"to":[12,116,168,176,187,216],"share":[13],"knowledge":[14],"and":[15,42,101,124,231],"exchange":[16],"practical":[17],"coding":[18,52,60],"solutions.":[19],"With":[20],"millions":[21],"reusable":[23],"code":[24,76,96,106,143,169],"snippets":[25,97,144],"contributed":[26],"by":[27,163],"users":[28,120,179],"worldwide,":[29],"it":[30],"plays":[31],"a":[32],"vital":[33],"role":[34],"in":[35,79,94],"modern":[36],"software":[37,69],"development.":[38],"However,":[39],"collaborative":[41],"informal":[43],"nature":[44],"platform":[47],"may":[48],"inadvertently":[49],"promote":[50],"insecure":[51],"practices,":[53],"particularly":[54],"when":[55,74],"contributors":[56],"lack":[57],"adequate":[58],"secure":[59],"knowledge.":[61],"These":[62],"practices":[63],"can":[64],"introduce":[65],"security":[66,148,220],"weaknesses":[67,172],"into":[68],"systems,":[70],"posing":[71],"serious":[72],"risks":[73],"such":[75,104,157],"is":[77],"reused":[78],"production":[80],"environments.":[81],"This":[82],"paper":[83],"empirically":[84],"investigates":[85],"prevalence":[87],"Common":[89],"Weakness":[90],"Enumeration":[91],"(CWE)":[92],"instances":[93],"C#":[95,128,182,206],"on":[98],"analyzes":[102],"how":[103],"security-relevant":[105],"evolves":[107],"through":[108],"user":[109],"revisions.":[110],"We":[111],"further":[112],"examine":[113],"extent":[115],"which":[117],"are":[121,173,184],"aware":[122,202],"apply":[125],"Microsoft":[127,205],"Secure":[129,207],"Coding":[130,208],"Guidelines.":[131,209],"The":[132,210],"results":[133],"our":[135],"study":[136],"show":[137],"that:":[138],"(1)":[139],"Users":[140],"repeatedly":[141],"post":[142],"containing":[145,170],"same":[147],"weaknesses.":[149],"Notably,":[150],"40.2%":[151],"latest":[154],"versions":[155],"answers":[158],"were":[159,200],"marked":[160],"as":[161,225],"\u201caccepted\u201d":[162],"original":[165],"askers.(2)":[166],"Revisions":[167],"these":[171],"more":[174,185],"likely":[175,186],"deteriorate,":[177],"whereas":[178],"with":[180],"greater":[181],"experience":[183],"reduce":[188],"them.(3)":[189],"More":[190],"than":[191],"half":[192],"survey":[195],"respondents":[196],"indicated":[197],"that":[198],"they":[199,214],"not":[201],"top":[211],"three":[212],"approaches":[213],"expected":[215],"use":[217],"addressing":[219],"issues":[221,229],"were:":[222],"marking":[223],"them":[224],"insecure,":[226],"fixing":[227],"themselves,":[230],"seeking":[232],"help":[233],"from":[234],"community.":[238]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}