65 citations · 489 across the 70 of their papers we have counts for
13 papers · 1 filter
Empirical Derivations from an Evolving Test Suite
Jukka Ruohonen, Abhishek Tiwari
The paper presents a longitudinal empirical analysis of the automated, continuous, and virtualization-based software test suite of the NetBSD operating system. The longitudinal per…
Towards Systematic Specification and Verification of Fairness Requirements: A Position Paper
Qusai Ramadan, Jukka Ruohonen, Abhishek Tiwari +2
Decisions suggested by improperly designed software systems might be prone to discriminate against people based on protected characteristics, such as gender and ethnicity. Previous…
Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
Jukka Ruohonen, Sani Abdullahi, Abhishek Tiwari
Motivated by software maintenance and the more recent concept of security debt, the paper presents a time series analysis of vulnerability patching of Red Hat's products and compon…
A Rapid Review Regarding the Concept of Legal Requirements in Requirements Engineering
Jukka Ruohonen
Out of a personal puzzlement, recent peer review comments, and demonstrable confusion in the existing literature, the paper presents a rapid review of the concept of legal requirem…
Snaps: Bloated and Outdated?
Jukka Ruohonen, Qusai Ramadan
Snap is an alternative software packaging system developed by Canonical and provided by default in the Ubuntu Linux distribution. Given the heterogeneity of various Linux distribut…
An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
Jukka Ruohonen, Eun-Young Kang, Qusai Ramadan
The paper presents an alignment evaluation between the mitigations present in the MITRE's ATT&CK framework and the essential cyber security requirements of the recently introduced…
Tracing Vulnerability Propagation Across Open Source Software Ecosystems
Jukka Ruohonen, Qusai Ramadan
The paper presents a traceability analysis of how over 84 thousand vulnerabilities have propagated across 28 open source software ecosystems. According to the results, the propagat…
A Time Series Analysis of Malware Uploads to Programming Language Ecosystems
Jukka Ruohonen, Mubashrah Saddiqa
Software ecosystems built around programming languages have greatly facilitated software development. At the same time, their security has increasingly been acknowledged as a probl…
From Cyber Security Incident Management to Cyber Security Crisis Management in the European Union
Jukka Ruohonen, Kalle Rindell, Simone Busetti
Incident management is a classical topic in cyber security. Recently, the European Union (EU) has started to consider also the relation between cyber security incidents and cyber s…
A Scenario Analysis of Ethical Issues in Dark Patterns and Their Research
Jukka Ruohonen, Jani Koskinen, Søren Harnow Klausen +1
Context: Dark patterns are user interface or other software designs that deceive or manipulate users to do things they would not otherwise do. Even though dark patterns have been u…
A Mapping Analysis of Requirements Between the CRA and the GDPR
Jukka Ruohonen, Kalle Hjerppe, Eun-Young Kang
A new Cyber Resilience Act (CRA) was recently agreed upon in the European Union (EU). The paper examines and elaborates what new requirements the CRA entails by contrasting it with…
The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
Jukka Ruohonen, Qusai Ramadan
There has been a long-standing hypothesis that a software's popularity is related to its security or insecurity in both research and popular discourse. There are also a few empiric…
Early Perspectives on the Digital Europe Programme
Jukka Ruohonen, Paul Timmers
A new Digital Europe Programme (DEP), a funding instrument for development and innovation, was established in the European Union (EU) in 2021. The paper makes an empirical inquiry…