169 citations · 253 across the 14 of their papers we have counts for
6 papers · 1 filter
SZZ in the time of Pull Requests
Fernando Petrulio, David Ackermann, Enrico Fregnan +6
In the multi-commit development model, programmers complete tasks (e.g., implementing a feature) by organizing their work in several commits and packaging them into a commit-set. A…
Software Security during Modern Code Review: The Developer's Perspective
Larissa Braz, Alberto Bacchelli
To avoid software vulnerabilities, organizations are shifting security to earlier stages of the software development, such as at code review time. In this paper, we aim to understa…
First Come First Served: The Impact of File Position on Code Review
Enrico Fregnan, Larissa Braz, Marco D'Ambros +2
The most popular code review tools (e.g., Gerrit and GitHub) present the files to review sorted in alphabetical order. Could this choice or, more generally, the relative position i…
An Exploratory Study on Regression Vulnerabilities
Larissa Braz, Enrico Fregnan, Vivek Arora +1
Background: Security regressions are vulnerabilities introduced in a previously unaffected software system. They often happen as a result of source code changes (e.g., a bug fix) a…
Less is More: Supporting Developers in Vulnerability Detection during Code Review
Larissa Braz, Christian Aeberhard, Gül Çalikli +1
Reviewing source code from a security perspective has proven to be a difficult task. Indeed, previous research has shown that developers often miss even popular and easy-to-detect…
Interpersonal Conflicts During Code Review
Pavlína Wurzel Gonçalves, Gül Çalıklı, Alberto Bacchelli
Code review consists of manual inspection, discussion, and judgment of source code by developers other than the code's author. Due to discussions around competing ideas and group d…