Why Security Defects Go Unnoticed during Code Reviews? A Case-Control Study of the Chromium OS Project

Rajshakhar Paul, Asif Kamal Turzo, Amiangshu Bosu

Peer code review has been found to be effective in identifying security vulnerabilities. However, despite practicing mandatory code reviews, many Open Source Software (OSS) project…