Developers turn to Stack Overflow and other on-line sources to find solutions to security problems, but little is known about how they engage with and guide one another in these environments or the perceptions of software security this may encourage. This study joins recent calls to understand more about how developers use Internet sources to solve security problems. Using qualitative methods, a set of questions within the security channel of Stack Overflow were selected and examined for themes. Preliminary findings reveal more about this community of practitioners: who are the askers and commenters, how security questions are asked and how develop-ers frame technical information using social and experience-based perceptions of security.

Date: 2018
Publisher: Open Research Online
Publisher URL: https://doi.org/10.1145/3194707.3194713
Full text: http://oro.open.ac.uk/54873/1/SEAD-CRC.pdf

Categories: Publications