{"id":"https://openalex.org/W4399668269","doi":"https://doi.org/10.1145/3661167.3661266","title":"Evidence-Based Research for Supporting Software Security in Software Development: Methodological Challenges & Strategies","display_name":"Evidence-Based Research for Supporting Software Security in Software Development: Methodological Challenges & Strategies","publication_year":2024,"publication_date":"2024-06-14","ids":{"openalex":"https://openalex.org/W4399668269","doi":"https://doi.org/10.1145/3661167.3661266"},"language":"en","primary_location":{"id":"doi:10.1145/3661167.3661266","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3661167.3661266","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"type":"conference-abstract","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Muhammad Ali Babar","raw_affiliation_strings":["CREST - Centre for Research on Engineering Software Technologies, University of Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9696-3626","affiliations":[{"raw_affiliation_string":"CREST - Centre for Research on Engineering Software Technologies, University of Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5103075476"],"corresponding_institution_ids":["https://openalex.org/I5681781"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"3"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8258000016212463,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8258000016212463,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.8202000260353088,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6470685005187988},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.5177246928215027},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.476742148399353},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.47583603858947754},{"id":"https://openalex.org/keywords/software-peer-review","display_name":"Software peer review","score":0.44121095538139343},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4398077428340912},{"id":"https://openalex.org/keywords/software-analytics","display_name":"Software analytics","score":0.43049758672714233},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.3435458242893219},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.32155323028564453},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.22573265433311462},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18764513731002808},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09637856483459473},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.07092785835266113}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6470685005187988},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.5177246928215027},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.476742148399353},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.47583603858947754},{"id":"https://openalex.org/C74579156","wikidata":"https://www.wikidata.org/wiki/Q7554342","display_name":"Software peer review","level":5,"score":0.44121095538139343},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4398077428340912},{"id":"https://openalex.org/C171981572","wikidata":"https://www.wikidata.org/wiki/Q7554239","display_name":"Software analytics","level":5,"score":0.43049758672714233},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.3435458242893219},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32155323028564453},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.22573265433311462},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18764513731002808},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09637856483459473},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.07092785835266113}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3661167.3661266","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3661167.3661266","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3157838713","https://openalex.org/W4312927049","https://openalex.org/W185543890","https://openalex.org/W3186869374","https://openalex.org/W2757929269","https://openalex.org/W2371269538","https://openalex.org/W2020201402","https://openalex.org/W3000110022","https://openalex.org/W1955230756","https://openalex.org/W2068215719"],"abstract_inverted_index":{"This":[0],"is":[1],"an":[2],"extended":[3],"abstract":[4],"for":[5,13,34,40,59,91],"the":[6,9,44,61,72,77,87,92],"tutorial":[7,23,65],"on":[8,68],"challenges":[10,45],"and":[11,15,31,37,42,50,52,57,70,83,97],"strategies":[12],"designing":[14],"conducting":[16],"empirical":[17,81],"research":[18,30,82,96],"in":[19,79],"software":[20,49,94],"security.":[21],"The":[22,64],"will":[24,66],"draw":[25],"some":[26],"examples":[27],"from":[28],"our":[29],"development":[32,95],"efforts":[33],"using":[35],"quantitative":[36],"qualitative":[38],"methods":[39],"identifying":[41,69],"understanding":[43],"of":[46],"developing":[47],"secure":[48,93],"devising":[51],"evaluating":[53],"appropriate":[54],"methods,":[55],"processes":[56],"tools":[58],"addressing":[60],"identified":[62],"challenges.":[63],"focus":[67],"discussing":[71],"key":[73],"lessons":[74],"learned":[75],"by":[76],"participants":[78],"their":[80],"how":[84],"they":[85],"are":[86],"same":[88],"or":[89],"different":[90],"development.":[98]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}