65 citations · 489 across the 70 of their papers we have counts for
14 papers · 1 filter
On Algorithmic Fairness and the EU Regulations
Jukka Ruohonen
The short paper discusses algorithmic fairness by focusing on non-discrimination and a few important laws in the European Union (EU). In addition to the EU laws addressing discrimi…
A Time Series Analysis of Assertions in the Linux Kernel
Jukka Ruohonen
Assertions are a classical and typical software development technique. These are extensively used also in operating systems and their kernels, including the Linux kernel. The paper…
SoK: The Design Paradigm of Safe and Secure Defaults
Jukka Ruohonen
In security engineering, including software security engineering, there is a well-known design paradigm telling to prefer safe and secure defaults. The paper presents a systematiza…
A Systematic Literature Review on the NIS2 Directive
Jukka Ruohonen
The second network and information security (NIS2) directive was enacted in the European Union (EU) in late 2022. It deals particularly with European critical infrastructures, enla…
Vulnerability Coordination Under the Cyber Resilience Act
Jukka Ruohonen, Paul Timmers
The Cyber Resilience Act (CRA) of the European Union (EU) imposes many new cyber security requirements practically to all network-enabled information technology products, whether h…
An Overview of Cyber Security Funding for Open Source Software
Jukka Ruohonen, Gaurav Choudhary, Adam Alami
Many open source software (OSS) projects need more human resources for maintenance, improvements, and sometimes even their survival. These needs allegedly apply even to vital OSS p…
Fast Fixes and Faulty Drivers: An Empirical Analysis of Regression Bug Fixing Times in the Linux Kernel
Jukka Ruohonen, Adam Alami
Regression bugs refer to situations in which something that worked previously no longer works currently. Such bugs have been pronounced in the Linux kernel. The paper focuses on re…
An Empirical Study of Vulnerability Handling Times in CPython
Jukka Ruohonen
The paper examines the handling times of software vulnerabilities in CPython, the reference implementation and interpreter for the today's likely most popular programming language,…
The Potential of Citizen Platforms for Requirements Engineering of Large Socio-Technical Software Systems
Jukka Ruohonen, Kalle Hjerppe
Participatory citizen platforms are innovative solutions to digitally better engage citizens in policy-making and deliberative democracy in general. Although these platforms have b…
A Static Analysis of Popular C Packages in Linux
Jukka Ruohonen, Mubashrah Saddiqa, Krzysztof Sierszecki
Static analysis is a classical technique for improving software security and software quality in general. Fairly recently, a new static analyzer was implemented in the GNU Compiler…
What Do We Know About the Psychology of Insider Threats?
Jukka Ruohonen, Mubashrah Saddiqa
Insider threats refer to threats originating from people inside organizations. Although such threats are a classical research topic, the systematization of existing knowledge is st…
Crisis Communication in the Face of Data Breaches
Jukka Ruohonen, Kalle Hjerppe, Katleena Kortesuo
Data breaches refer to unauthorized accesses to data. Typically but not always, data breaches are about cyber crime. An organization facing such a crime is often also in a crisis s…
The Incoherency Risk in the EU's New Cyber Security Policies
Jukka Ruohonen
The European Union (EU) has been pursuing new cyber security policies in recent years. This paper presents a short reflection of four such policies. The focus is on potential incoh…
An Exploratory Case Study on Data Breach Journalism
Jukka Ruohonen, Kalle Hjerppe, Maximilian von Zastrow
This paper explores the novel topic of data breach journalism and data breach news through the case of databreaches.net, a news outlet dedicated to data breaches and related cyber…