3 papers
cs.CR2026
Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
Kevin Hermann, Sven Peldszus, Thorsten Berger
Static security analysis is a widely used technique for detecting software vulnerabilities across a wide range of weaknesses, application domains, and programming languages. While…
cs.SE2025
An Exploratory Study on the Engineering of Security Features
Kevin Hermann, Sven Peldszus, Jan-Philipp Steghöfer +1
Software security is of utmost importance for most software systems. Developers must systematically select, plan, design, implement, and especially, maintain and evolve security fe…
cs.CR2025
A Taxonomy of Functional Security Features and How They Can Be Located
Kevin Hermann, Simon Schneider, Catherine Tony +6
Security must be considered in almost every software system. Unfortunately, selecting and implementing security features remains challenging due to the variety of security threats…