Technical debt as an indicator of software security risk: a machine learning approach for software development enterprises.

Gespeichert in:
Bibliographische Detailangaben
Titel: Technical debt as an indicator of software security risk: a machine learning approach for software development enterprises.
Autoren: Siavvas, Miltiadis, Tsoukalas, Dimitrios, Jankovic, Marija, Kehagias, Dionysios, Tzovaras, Dimitrios
Quelle: Enterprise Information Systems; May2022, Vol. 16 Issue 5, p1-43, 43p
Schlagwörter: COMPUTER software security, COMPUTER software development, DEBT, SOFTWARE engineering, BUSINESS enterprises, SOFTWARE product line engineering, MACHINE learning
Abstract: Vulnerability prediction facilitates the development of secure software, as it enables the identification and mitigation of security risks early enough in the software development lifecycle. Although several factors have been studied for their ability to indicate software security risk, very limited attention has been given to technical debt (TD), despite its potential relevance to software security. To this end, in the present study, we investigate the ability of common TD indicators to indicate security risks in software products, both at project-level and at class-level of granularity. Our findings suggest that TD indicators may potentially act as security indicators as well. [ABSTRACT FROM AUTHOR]
Copyright of Enterprise Information Systems is the property of Taylor & Francis Ltd and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Datenbank: Complementary Index
Beschreibung
Abstract:Vulnerability prediction facilitates the development of secure software, as it enables the identification and mitigation of security risks early enough in the software development lifecycle. Although several factors have been studied for their ability to indicate software security risk, very limited attention has been given to technical debt (TD), despite its potential relevance to software security. To this end, in the present study, we investigate the ability of common TD indicators to indicate security risks in software products, both at project-level and at class-level of granularity. Our findings suggest that TD indicators may potentially act as security indicators as well. [ABSTRACT FROM AUTHOR]
ISSN:17517575
DOI:10.1080/17517575.2020.1824017