{"id":"https://openalex.org/W2893866226","doi":"https://doi.org/10.3390/computers7040049","title":"An Empirical Study on Security Knowledge Sharing and Learning in Open Source Software Communities","display_name":"An Empirical Study on Security Knowledge Sharing and Learning in Open Source Software Communities","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2893866226","doi":"https://doi.org/10.3390/computers7040049","mag":"2893866226"},"language":"en","primary_location":{"id":"doi:10.3390/computers7040049","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers7040049","pdf_url":"https://www.mdpi.com/2073-431X/7/4/49/pdf?version=1538387160","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-431X/7/4/49/pdf?version=1538387160","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023668857","display_name":"Shao-Fang Wen","orcid":"https://orcid.org/0000-0002-6228-8367"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Shao-Fang Wen","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gjovik, Norway"],"raw_orcid":"https://orcid.org/0000-0002-6228-8367","affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gjovik, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5023668857"],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":0.9453,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.80540541,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"7","issue":"4","first_page":"49","last_page":"49"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12028","display_name":"Knowledge Management and Sharing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/3315","display_name":"Communication"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6191823482513428},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6062929034233093},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.597663402557373},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.5368052124977112},{"id":"https://openalex.org/keywords/knowledge-sharing","display_name":"Knowledge sharing","score":0.4996304512023926},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.47019514441490173},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.45978808403015137},{"id":"https://openalex.org/keywords/open-source-software-development","display_name":"Open-source software development","score":0.4529905617237091},{"id":"https://openalex.org/keywords/security-awareness","display_name":"Security awareness","score":0.43497219681739807},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40939927101135254},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3861992657184601},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3634849488735199},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2547909915447235},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.22938260436058044}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6191823482513428},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6062929034233093},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.597663402557373},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5368052124977112},{"id":"https://openalex.org/C2776604539","wikidata":"https://www.wikidata.org/wiki/Q6423395","display_name":"Knowledge sharing","level":2,"score":0.4996304512023926},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.47019514441490173},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.45978808403015137},{"id":"https://openalex.org/C2778642129","wikidata":"https://www.wikidata.org/wiki/Q7096425","display_name":"Open-source software development","level":4,"score":0.4529905617237091},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.43497219681739807},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40939927101135254},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3861992657184601},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3634849488735199},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2547909915447235},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.22938260436058044},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/computers7040049","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers7040049","pdf_url":"https://www.mdpi.com/2073-431X/7/4/49/pdf?version=1538387160","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b3922cff1add40ff877946a45ea17454","is_oa":true,"landing_page_url":"https://doaj.org/article/b3922cff1add40ff877946a45ea17454","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 7, Iss 4, p 49 (2018)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2073-431X/7/4/49/","is_oa":true,"landing_page_url":"http://doi.org/10.3390/computers7040049","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers","raw_type":"Text"},{"id":"pmh:oai:ntnuopen.ntnu.no:11250/2611749","is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/2611749","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"1-19","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.3390/computers7040049","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers7040049","pdf_url":"https://www.mdpi.com/2073-431X/7/4/49/pdf?version=1538387160","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W2893866226.pdf"},"referenced_works_count":94,"referenced_works":["https://openalex.org/W19992006","https://openalex.org/W97194039","https://openalex.org/W132253366","https://openalex.org/W182051043","https://openalex.org/W268679155","https://openalex.org/W1495218229","https://openalex.org/W1506276717","https://openalex.org/W1509165000","https://openalex.org/W1511583883","https://openalex.org/W1583442288","https://openalex.org/W1595575146","https://openalex.org/W1597209777","https://openalex.org/W1607405266","https://openalex.org/W1780766673","https://openalex.org/W1805157503","https://openalex.org/W1966600289","https://openalex.org/W1970131054","https://openalex.org/W1974108202","https://openalex.org/W1975965087","https://openalex.org/W1980035914","https://openalex.org/W1988915836","https://openalex.org/W1989105584","https://openalex.org/W2002299362","https://openalex.org/W2006624349","https://openalex.org/W2007329840","https://openalex.org/W2010000572","https://openalex.org/W2020279480","https://openalex.org/W2028561093","https://openalex.org/W2053952776","https://openalex.org/W2054242251","https://openalex.org/W2054315433","https://openalex.org/W2058638038","https://openalex.org/W2065159593","https://openalex.org/W2069138025","https://openalex.org/W2080514041","https://openalex.org/W2088489410","https://openalex.org/W2093753007","https://openalex.org/W2096059703","https://openalex.org/W2096249199","https://openalex.org/W2097422937","https://openalex.org/W2100511523","https://openalex.org/W2102099252","https://openalex.org/W2106706708","https://openalex.org/W2115571006","https://openalex.org/W2117369957","https://openalex.org/W2123071357","https://openalex.org/W2123709218","https://openalex.org/W2124469445","https://openalex.org/W2124700594","https://openalex.org/W2128232603","https://openalex.org/W2129083809","https://openalex.org/W2134952485","https://openalex.org/W2138783984","https://openalex.org/W2143439038","https://openalex.org/W2143558999","https://openalex.org/W2147398703","https://openalex.org/W2148273052","https://openalex.org/W2149520412","https://openalex.org/W2150964509","https://openalex.org/W2153545048","https://openalex.org/W2155202048","https://openalex.org/W2161037863","https://openalex.org/W2161607736","https://openalex.org/W2161867217","https://openalex.org/W2165916445","https://openalex.org/W2169276809","https://openalex.org/W2211027002","https://openalex.org/W2236373062","https://openalex.org/W2237875934","https://openalex.org/W2402821523","https://openalex.org/W2473564466","https://openalex.org/W2474458775","https://openalex.org/W2487004214","https://openalex.org/W2782969241","https://openalex.org/W2800968634","https://openalex.org/W2998866860","https://openalex.org/W3022734214","https://openalex.org/W3121647552","https://openalex.org/W3123293202","https://openalex.org/W3123902173","https://openalex.org/W3147795728","https://openalex.org/W4205192141","https://openalex.org/W4230548056","https://openalex.org/W4232736849","https://openalex.org/W4240586794","https://openalex.org/W4245961435","https://openalex.org/W4248242548","https://openalex.org/W4250311729","https://openalex.org/W6605374509","https://openalex.org/W6632623991","https://openalex.org/W6669035370","https://openalex.org/W6678295515","https://openalex.org/W6684529569","https://openalex.org/W6720841480"],"related_works":["https://openalex.org/W2141388993","https://openalex.org/W1978034799","https://openalex.org/W2999607548","https://openalex.org/W2956597637","https://openalex.org/W2044639210","https://openalex.org/W2293245356","https://openalex.org/W4225160120","https://openalex.org/W23486959","https://openalex.org/W1588942021","https://openalex.org/W4384518368"],"abstract_inverted_index":{"Open":[0],"source":[1],"software":[2,39,61,142,164],"(OSS)":[3],"security":[4,11,40,44,62,86,113,143,165],"has":[5],"been":[6],"the":[7,10,16,20,58,70,77,85,89,97,145,158,184],"focus":[8],"of":[9,22,191],"community":[12,99],"and":[13,35,66,76,116,139,144,163,173],"practitioners":[14],"over":[15],"past":[17],"decades.":[18],"However,":[19,108],"number":[21],"new":[23],"vulnerabilities":[24,45],"keeps":[25],"increasing":[26],"in":[27,46,51,57,118,168,183],"today\u2019s":[28,32],"OSS":[29,47,93,98,119,169],"systems.":[30],"With":[31],"increasingly":[33],"important":[34],"complex":[36],"OSS,":[37],"lacking":[38],"knowledge":[41,114,137],"to":[42,83,127,156,179,186],"handle":[43],"development":[48],"will":[49],"result":[50],"more":[52],"breaches":[53],"that":[54,96,110,135,154],"are":[55,121],"serious":[56],"future.":[59],"Learning":[60],"is":[63,72,81,125,152],"a":[64,188],"difficult":[65],"challenging":[67],"task":[68],"since":[69],"domain":[71],"quite":[73],"context":[74],"specific":[75,90],"real":[78],"project":[79],"situation":[80],"necessary":[82],"apply":[84],"concepts":[87],"within":[88],"system.":[91],"Many":[92],"proponents":[94],"believe":[95],"offers":[100],"significant":[101],"learning":[102,117,140,166],"opportunities":[103],"from":[104],"its":[105],"best":[106],"practices.":[107],"studies":[109],"specifically":[111],"explore":[112],"sharing":[115,138],"communities":[120],"scarce.":[122],"This":[123],"research":[124,193],"intended":[126],"fill":[128],"this":[129,192],"gap":[130],"by":[131],"empirically":[132],"investigating":[133],"factors":[134],"affect":[136],"about":[141],"relationship":[146],"among":[147],"them.":[148],"A":[149,171],"conceptual":[150],"model":[151,185],"proposed":[153],"helps":[155],"conceptualize":[157],"linkage":[159],"between":[160],"socio-technical":[161],"practices":[162],"processes":[167],"communities.":[170],"questionnaire":[172],"statistical":[174],"analytical":[175],"techniques":[176],"were":[177],"employed":[178],"test":[180],"hypothesized":[181],"relationships":[182],"gain":[187],"better":[189],"understanding":[190],"topic.":[194]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2026-05-22T06:13:13.366637","created_date":"2025-10-10T00:00:00"}
