{"id":"https://openalex.org/W4411552882","doi":"https://doi.org/10.1109/icse55347.2025.00184","title":"An Exploratory Study on the Engineering of Security Features","display_name":"An Exploratory Study on the Engineering of Security Features","publication_year":2025,"publication_date":"2025-04-26","ids":{"openalex":"https://openalex.org/W4411552882","doi":"https://doi.org/10.1109/icse55347.2025.00184"},"language":"en","primary_location":{"id":"doi:10.1109/icse55347.2025.00184","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse55347.2025.00184","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 47th International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103261870","display_name":"Kevin Hermann","orcid":"https://orcid.org/0009-0004-6207-4045"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kevin Hermann","raw_affiliation_strings":["Ruhr University,Bochum,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University,Bochum,Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070179477","display_name":"Sven Peldszus","orcid":"https://orcid.org/0000-0002-2604-0487"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sven Peldszus","raw_affiliation_strings":["Ruhr University,Bochum,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University,Bochum,Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033422210","display_name":"Jan-Philipp Stegh\u00f6fer","orcid":"https://orcid.org/0000-0003-1694-0972"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jan-Philipp Stegh\u00f6fer","raw_affiliation_strings":["XITASO GmbH,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XITASO GmbH,Germany","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072456187","display_name":"Thorsten Berger","orcid":"https://orcid.org/0000-0002-3870-5167"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thorsten Berger","raw_affiliation_strings":["Ruhr University,Bochum,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University,Bochum,Germany","institution_ids":["https://openalex.org/I904495901"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2470","last_page":"2482"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T14484","display_name":"Technology and Data Analysis","score":0.7820000052452087,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14484","display_name":"Technology and Data Analysis","score":0.7820000052452087,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13243","display_name":"Innovation in Digital Healthcare Systems","score":0.7414000034332275,"subfield":{"id":"https://openalex.org/subfields/3605","display_name":"Health Information Management"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T13751","display_name":"Diverse Approaches in Healthcare and Education Studies","score":0.6855999827384949,"subfield":{"id":"https://openalex.org/subfields/2739","display_name":"Public Health, Environmental and Occupational Health"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6480592489242554},{"id":"https://openalex.org/keywords/exploratory-research","display_name":"Exploratory research","score":0.47579798102378845},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41340571641921997}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6480592489242554},{"id":"https://openalex.org/C85973986","wikidata":"https://www.wikidata.org/wiki/Q1091731","display_name":"Exploratory research","level":2,"score":0.47579798102378845},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41340571641921997},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icse55347.2025.00184","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse55347.2025.00184","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 47th International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.49000000953674316}],"awards":[{"id":"https://openalex.org/G18682879","display_name":"EXC 2092: CyberSicherheit im Zeitalter gro\u00dfskaliger Angreifer (CASA)","funder_award_id":"390781972","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1875962355","https://openalex.org/W1967446222","https://openalex.org/W2008810193","https://openalex.org/W2011698232","https://openalex.org/W2013731130","https://openalex.org/W2043584256","https://openalex.org/W2057864103","https://openalex.org/W2058154764","https://openalex.org/W2063466632","https://openalex.org/W2063990300","https://openalex.org/W2075642720","https://openalex.org/W2098634112","https://openalex.org/W2099213660","https://openalex.org/W2125247206","https://openalex.org/W2126313201","https://openalex.org/W2126513753","https://openalex.org/W2131730994","https://openalex.org/W2160469838","https://openalex.org/W2166069603","https://openalex.org/W2168740635","https://openalex.org/W2256472973","https://openalex.org/W2294407885","https://openalex.org/W2344018727","https://openalex.org/W2357927175","https://openalex.org/W2395092677","https://openalex.org/W2524597629","https://openalex.org/W2541261609","https://openalex.org/W2563098966","https://openalex.org/W2698406033","https://openalex.org/W2740709355","https://openalex.org/W2767943400","https://openalex.org/W2808827828","https://openalex.org/W2809689731","https://openalex.org/W2943403861","https://openalex.org/W2943425875","https://openalex.org/W2980596464","https://openalex.org/W2990442582","https://openalex.org/W3001443755","https://openalex.org/W3001572235","https://openalex.org/W3161918289","https://openalex.org/W3167284599","https://openalex.org/W3176915151","https://openalex.org/W3194418750","https://openalex.org/W3198867963","https://openalex.org/W4205736829","https://openalex.org/W4210654156","https://openalex.org/W4231304298","https://openalex.org/W4245722184","https://openalex.org/W4285413042","https://openalex.org/W4308410894","https://openalex.org/W4387872582","https://openalex.org/W4388857107","https://openalex.org/W4390482600","https://openalex.org/W4402264466","https://openalex.org/W4403935792","https://openalex.org/W4410830633","https://openalex.org/W6605333742","https://openalex.org/W6744384640","https://openalex.org/W6872343487"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Software":[0],"security":[1,22,39,44,52,80,86,163],"is":[2,74],"of":[3,40,69,165],"utmost":[4],"importance":[5],"for":[6,100],"most":[7],"software":[8,166],"systems.":[9],"Developers":[10],"must":[11],"systematically":[12],"select,":[13],"plan,":[14],"design,":[15],"implement,":[16],"and":[17,20,56,90,97,137,170,180,197],"especially,":[18],"maintain":[19],"evolve":[21],"features-functionalities":[23],"to":[24,88,121,132],"mitigate":[25],"attacks":[26],"or":[27,34,117],"protect":[28],"personal":[29],"data":[30,131,189],"such":[31,70],"as":[32],"cryptography":[33],"access":[35],"control-to":[36],"ensure":[37],"the":[38,67,98,187],"their":[41,175],"software.":[42],"Although":[43],"features":[45,53,87,164],"are":[46,111,168],"usually":[47],"available":[48],"in":[49,172],"libraries,":[50,71],"integrating":[51],"requires":[54],"writing":[55],"maintaining":[57],"additional":[58],"security-critical":[59],"code.":[60],"While":[61],"there":[62],"have":[63],"been":[64],"studies":[65],"on":[66,108,114,186],"use":[68],"surprisingly":[72],"little":[73],"known":[75],"about":[76],"how":[77,82,138,162],"developers":[78],"engineer":[79],"features,":[81],"they":[83,139],"select":[84],"what":[85,134,174,181],"implement":[89],"which":[91],"ones":[92],"may":[93],"require":[94],"custom":[95],"implementation,":[96],"implications":[99],"maintenance.":[101],"As":[102],"a":[103],"result,":[104],"we":[105,143,150,191],"currently":[106,144],"rely":[107],"assumptions":[109],"that":[110,142],"largely":[112],"based":[113],"common":[115,200],"sense":[116],"individual":[118],"examples.":[119],"However,":[120],"provide":[122,192],"them":[123],"with":[124,155],"effective":[125],"solutions,":[126],"researchers":[127],"need":[128,136],"hard":[129],"empirical":[130,188],"understand":[133],"practitioners":[135,183],"view":[140],"security-data":[141],"lack.":[145],"To":[146],"fill":[147],"this":[148],"gap,":[149],"contribute":[151],"an":[152],"exploratory":[153],"study":[154,161],"26":[156],"knowledgeable":[157],"industrial":[158],"participants.":[159],"We":[160],"systems":[167],"selected":[169],"engineered":[171],"practice,":[173],"code-":[176],"level":[177],"characteristics":[178],"are,":[179],"challenges":[182],"face.":[184],"Based":[185],"gathered,":[190],"insights":[193],"into":[194],"engineering":[195],"practices":[196],"validate":[198],"four":[199],"assumptions.":[201]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}