21 citations · 21 across the 2 of their papers we have counts for
2 papers
cs.CR2021★ 21 cited
The best laid plans or lack thereof: Security decision-making of different stakeholder groups
Benjamin Shreeve, Joseph Hallett, Matthew Edwards +3
Cyber security requirements are influenced by the priorities and decisions of a range of stakeholders. Board members and CISOs determine strategic priorities. Managers have respons…
cs.CR2021
"Do this! Do that!, And nothing will happen" Do specifications lead to securely stored passwords?
Joseph Hallett, Nikhil Patnaik, Benjamin Shreeve +1
Does the act of writing a specification (how the code should behave) for a piece of security sensitive code lead to developers producing more secure code? We asked 138 developers t…