65 citations · 489 across the 70 of their papers we have counts for
24 papers · 1 filter
A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System
Jukka Ruohonen, Krzysztof Sierszecki, Abhishek Tiwari
The paper presents a longitudinal measurement study on the adoption of the pledge and unveil system calls in OpenBSD. These system calls are used to sandbox programs and libraries.…
Digital Sovereignty as a Quality Attribute for Software Architectures
Jukka Ruohonen, Justin Stark, Scott Wilkie +1
Digital sovereignty (DS) is an increasingly important concept and political agenda throughout the world, including in the European Union (EU). However, the concept is also regretta…
Empirical Derivations from an Evolving Test Suite
Jukka Ruohonen, Abhishek Tiwari
The paper presents a longitudinal empirical analysis of the automated, continuous, and virtualization-based software test suite of the NetBSD operating system. The longitudinal per…
Towards Systematic Specification and Verification of Fairness Requirements: A Position Paper
Qusai Ramadan, Jukka Ruohonen, Abhishek Tiwari +2
Decisions suggested by improperly designed software systems might be prone to discriminate against people based on protected characteristics, such as gender and ethnicity. Previous…
Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
Jukka Ruohonen, Sani Abdullahi, Abhishek Tiwari
Motivated by software maintenance and the more recent concept of security debt, the paper presents a time series analysis of vulnerability patching of Red Hat's products and compon…
A Rapid Review Regarding the Concept of Legal Requirements in Requirements Engineering
Jukka Ruohonen
Out of a personal puzzlement, recent peer review comments, and demonstrable confusion in the existing literature, the paper presents a rapid review of the concept of legal requirem…
Snaps: Bloated and Outdated?
Jukka Ruohonen, Qusai Ramadan
Snap is an alternative software packaging system developed by Canonical and provided by default in the Ubuntu Linux distribution. Given the heterogeneity of various Linux distribut…
Tracing Vulnerability Propagation Across Open Source Software Ecosystems
Jukka Ruohonen, Qusai Ramadan
The paper presents a traceability analysis of how over 84 thousand vulnerabilities have propagated across 28 open source software ecosystems. According to the results, the propagat…
A Scenario Analysis of Ethical Issues in Dark Patterns and Their Research
Jukka Ruohonen, Jani Koskinen, Søren Harnow Klausen +1
Context: Dark patterns are user interface or other software designs that deceive or manipulate users to do things they would not otherwise do. Even though dark patterns have been u…
A Mapping Analysis of Requirements Between the CRA and the GDPR
Jukka Ruohonen, Kalle Hjerppe, Eun-Young Kang
A new Cyber Resilience Act (CRA) was recently agreed upon in the European Union (EU). The paper examines and elaborates what new requirements the CRA entails by contrasting it with…
The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
Jukka Ruohonen, Qusai Ramadan
There has been a long-standing hypothesis that a software's popularity is related to its security or insecurity in both research and popular discourse. There are also a few empiric…
A Time Series Analysis of Assertions in the Linux Kernel
Jukka Ruohonen
Assertions are a classical and typical software development technique. These are extensively used also in operating systems and their kernels, including the Linux kernel. The paper…
Fast Fixes and Faulty Drivers: An Empirical Analysis of Regression Bug Fixing Times in the Linux Kernel
Jukka Ruohonen, Adam Alami
Regression bugs refer to situations in which something that worked previously no longer works currently. Such bugs have been pronounced in the Linux kernel. The paper focuses on re…
The Potential of Citizen Platforms for Requirements Engineering of Large Socio-Technical Software Systems
Jukka Ruohonen, Kalle Hjerppe
Participatory citizen platforms are innovative solutions to digitally better engage citizens in policy-making and deliberative democracy in general. Although these platforms have b…
A Static Analysis of Popular C Packages in Linux
Jukka Ruohonen, Mubashrah Saddiqa, Krzysztof Sierszecki
Static analysis is a classical technique for improving software security and software quality in general. Fairly recently, a new static analyzer was implemented in the GNU Compiler…
A Large-Scale Security-Oriented Static Analysis of Python Packages in PyPI
Jukka Ruohonen, Kalle Hjerppe, Kalle Rindell
Different security issues are a common problem for open source packages archived to and delivered through software ecosystems. These often manifest themselves as software weaknesse…
A Case Study on Software Vulnerability Coordination
Jukka Ruohonen, Sampsa Rauti, Sami Hyrynsalmi +1
Context: Coordination is a fundamental tenet of software engineering. Coordination is required also for identifying discovered and disclosed software vulnerabilities with Common Vu…
Extracting Layered Privacy Language Purposes from Web Services
Kalle Hjerppe, Jukka Ruohonen, Ville Leppänen
Web services are important in the processing of personal data in the World Wide Web. In light of recent data protection regulations, this processing raises a question about consent…
Annotation-Based Static Analysis for Personal Data Protection
Kalle Hjerppe, Jukka Ruohonen, Ville Leppänen
This paper elaborates the use of static source code analysis in the context of data protection. The topic is important for software engineering in order for software developers to…
Empirical Notes on the Interaction Between Continuous Kernel Fuzzing and Development
Jukka Ruohonen, Kalle Rindell
Fuzzing has been studied and applied ever since the 1990s. Automated and continuous fuzzing has recently been applied also to open source software projects, including the Linux and…
The General Data Protection Regulation: Requirements, Architectures, and Constraints
Kalle Hjerppe, Jukka Ruohonen, Ville Leppänen
The General Data Protection Regulation (GDPR) in the European Union is the most famous recently enacted privacy regulation. Despite of the regulation's legal, political, and techno…
A Demand-Side Viewpoint to Software Vulnerabilities in WordPress Plugins
Jukka Ruohonen
WordPress has long been the most popular content management system (CMS). This CMS powers millions and millions of websites. Although WordPress has had a particularly bad track rec…
An Empirical Analysis of Vulnerabilities in Python Packages for Web Applications
Jukka Ruohonen
This paper examines software vulnerabilities in common Python packages used particularly for web development. The empirical dataset is based on the PyPI package repository and the…
How PHP Releases Are Adopted in the Wild?
Jukka Ruohonen, Ville Leppänen
This empirical paper examines the adoption of PHP releases in the the contemporary world wide web. Motivated by continuous software engineering practices and software traceability…