27 citations · 69 across the 5 of their papers we have counts for
5 papers · 1 filter
Software Security during Modern Code Review: The Developer's Perspective
Larissa Braz, Alberto Bacchelli
To avoid software vulnerabilities, organizations are shifting security to earlier stages of the software development, such as at code review time. In this paper, we aim to understa…
First Come First Served: The Impact of File Position on Code Review
Enrico Fregnan, Larissa Braz, Marco D'Ambros +2
The most popular code review tools (e.g., Gerrit and GitHub) present the files to review sorted in alphabetical order. Could this choice or, more generally, the relative position i…
An Exploratory Study on Regression Vulnerabilities
Larissa Braz, Enrico Fregnan, Vivek Arora +1
Background: Security regressions are vulnerabilities introduced in a previously unaffected software system. They often happen as a result of source code changes (e.g., a bug fix) a…
Less is More: Supporting Developers in Vulnerability Detection during Code Review
Larissa Braz, Christian Aeberhard, Gül Çalikli +1
Reviewing source code from a security perspective has proven to be a difficult task. Indeed, previous research has shown that developers often miss even popular and easy-to-detect…
Why Don't Developers Detect Improper Input Validation?'; DROP TABLE Papers; --
Larissa Braz, Enrico Fregnan, Gül Çalikli +1
Improper Input Validation (IIV) is a software vulnerability that occurs when a system does not safely handle input data. Even though IIV is easy to detect and fix, it still commonl…