{"id":"https://openalex.org/W4293227721","doi":"https://doi.org/10.1145/3478431.3499391","title":"Identifying Gaps in the Secure Programming Knowledge and Skills of Students","display_name":"Identifying Gaps in the Secure Programming Knowledge and Skills of Students","publication_year":2022,"publication_date":"2022-02-22","ids":{"openalex":"https://openalex.org/W4293227721","doi":"https://doi.org/10.1145/3478431.3499391"},"language":"en","primary_location":{"id":"doi:10.1145/3478431.3499391","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3478431.3499391","pdf_url":null,"source":{"id":"https://openalex.org/S4363608709","display_name":"Proceedings of the 53rd ACM Technical Symposium on Computer Science Education","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 53rd ACM Technical Symposium on Computer Science Education","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002705818","display_name":"Jessica Lam","orcid":"https://orcid.org/0000-0003-1693-1400"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jessica Lam","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000148011","display_name":"Elias Fang","orcid":"https://orcid.org/0000-0001-6994-1632"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elias Fang","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018780995","display_name":"Majed Almansoori","orcid":"https://orcid.org/0000-0002-5298-7703"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Majed Almansoori","raw_affiliation_strings":["University of Wisconsin - Madison, Madison, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin - Madison, Madison, WI, USA","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047666431","display_name":"Rahul Chatterjee","orcid":"https://orcid.org/0000-0002-5112-3188"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rahul Chatterjee","raw_affiliation_strings":["University of Wisconsin - Madison, Madison, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin - Madison, Madison, WI, USA","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016629484","display_name":"Adalbert Gerald Soosai Raj","orcid":"https://orcid.org/0000-0002-6848-2208"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adalbert Gerald Soosai Raj","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.584,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.91968092,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"703","last_page":"709"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7951236963272095},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.6979517936706543},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.6216209530830383},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.554142951965332},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.47954341769218445},{"id":"https://openalex.org/keywords/computer-programming","display_name":"Computer programming","score":0.47799840569496155},{"id":"https://openalex.org/keywords/mathematics-education","display_name":"Mathematics education","score":0.3728909492492676},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.315473735332489},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2699677646160126},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1902150809764862},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.18751320242881775},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.13363391160964966}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7951236963272095},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.6979517936706543},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.6216209530830383},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.554142951965332},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.47954341769218445},{"id":"https://openalex.org/C33857546","wikidata":"https://www.wikidata.org/wiki/Q80006","display_name":"Computer programming","level":2,"score":0.47799840569496155},{"id":"https://openalex.org/C145420912","wikidata":"https://www.wikidata.org/wiki/Q853077","display_name":"Mathematics education","level":1,"score":0.3728909492492676},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.315473735332489},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2699677646160126},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1902150809764862},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.18751320242881775},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.13363391160964966},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3478431.3499391","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3478431.3499391","pdf_url":null,"source":{"id":"https://openalex.org/S4363608709","display_name":"Proceedings of the 53rd ACM Technical Symposium on Computer Science Education","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 53rd ACM Technical Symposium on Computer Science Education","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8700000047683716,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W16117263","https://openalex.org/W2001281843","https://openalex.org/W2009035006","https://openalex.org/W2021546454","https://openalex.org/W2107426351","https://openalex.org/W2112720435","https://openalex.org/W2117968587","https://openalex.org/W2124879697","https://openalex.org/W2138817054","https://openalex.org/W2161052636","https://openalex.org/W2281549205","https://openalex.org/W2523566863","https://openalex.org/W2578745363","https://openalex.org/W2917130633","https://openalex.org/W2964144088","https://openalex.org/W2982364419","https://openalex.org/W3002225268","https://openalex.org/W3047686302","https://openalex.org/W3134136076"],"related_works":["https://openalex.org/W2618286804","https://openalex.org/W3131163342","https://openalex.org/W3096456556","https://openalex.org/W4240253816","https://openalex.org/W2166271660","https://openalex.org/W2142369114","https://openalex.org/W2002770077","https://openalex.org/W2411222674","https://openalex.org/W2074236728","https://openalex.org/W4378780645"],"abstract_inverted_index":{"Often,":[0],"security":[1,41,108],"topics":[2],"are":[3,179],"only":[4],"taught":[5,195],"in":[6,67,74,196],"advanced":[7],"computer":[8,40],"science":[9],"(CS)":[10],"courses.":[11,199],"However,":[12],"most":[13],"US":[14],"R1":[15,65],"universities":[16,66],"do":[17,149],"not":[18,150],"require":[19],"students":[20,34,62,73,125,137,178],"to":[21,25,93,131,141],"take":[22],"these":[23],"courses":[24],"complete":[26],"an":[27,84],"undergraduate":[28],"CS":[29],"degree.":[30],"As":[31],"a":[32,57],"result,":[33],"can":[35,118],"graduate":[36],"without":[37],"learning":[38],"about":[39],"and":[42,50,104,106,147],"secure":[43,53,133,171],"programming":[44,95,152],"practices.":[45],"To":[46],"gauge":[47],"students'":[48,91,159],"knowledge":[49],"skills":[51,130],"of":[52,161,185],"programming,":[54,187],"we":[55],"conducted":[56],"coding":[58],"interview":[59],"with":[60,155,181],"21":[61],"from":[63],"two":[64],"the":[68,72,90,127,183,192],"United":[69],"States.":[70],"All":[71],"our":[75],"study":[76],"had":[77],"at":[78],"least":[79],"taken":[80],"Computer":[81,197],"Systems":[82,198],"or":[83],"equivalent":[85],"course.":[86],"We":[87,173],"then":[88],"analyzed":[89],"approach":[92],"safe":[94],"practices,":[96],"such":[97,110,143],"as":[98,111,144],"avoiding":[99],"unsafe":[100],"functions":[101],"like":[102],"gets":[103],"strcpy,":[105],"basic":[107],"knowledge,":[109],"writing":[112,170],"code":[113],"that":[114,124,176],"assumes":[115],"user":[116],"inputs":[117],"be":[119],"malicious.":[120],"Our":[121],"results":[122],"suggest":[123],"lack":[126],"key":[128],"fundamental":[129],"write":[132],"programs.":[134,172],"For":[135],"example,":[136],"rarely":[138],"pay":[139],"attention":[140],"details,":[142],"compiler":[145],"warnings,":[146],"often":[148],"read":[151],"language":[153,194],"documentation":[154],"care.":[156],"Moreover,":[157],"some":[158,177],"understanding":[160],"memory":[162],"layout":[163],"is":[164,167,191],"cursory,":[165],"which":[166],"crucial":[168],"for":[169],"also":[174],"found":[175],"struggling":[180],"even":[182,188],"basics":[184],"C":[186],"though":[189],"it":[190],"main":[193]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}