Matches in SemOpenAlex for { <https://semopenalex.org/work/W2901947009> ?p ?o ?g. }
Showing items 1 to 79 of
79
with 100 items per page.
- W2901947009 abstract "Various software libraries and frameworks provide a variety of APIs to support secure coding. However, misusing these APIs can cost developers tremendous time and effort, introduce security vulnerabilities to software, and cause serious consequences like data leakage or Denial of Service (DoS) on servers. Our tutorial aims to educate people on the best practice of secure coding, the pitfalls that should be avoided, and the detection tools and fixing suggestions of insecure code.To increase the security awareness of developers and improve the quality of their software products, we propose a 90-minute tutorial to teach participants the principles and practices of Java secure coding, including the SSL/TLS and Spring Security configuration. In this tutorial, we will introduce the principles of using security APIs, analyze typical API misuse cases to explain the causes and effects. We will also introduce a tool that we recently developed to automatically detect API misuse in Java.There are five parts in our tutorial. To reveal the secure coding practice, we will first introduce the findings in our recent study on StackOverflow posts relevant to Java security. Second, we will discuss the recommended principles of API usage by security experts. Third, to correlate the principles with existing practice, we will discuss some API misuse examples for the SSL/TLS certificate verification, Spring Security authentication, etc. Fourth, we will ask participants to examine extra code examples and discuss the security property. Finally, We will give an overview of the available tools and resources, demonstrate a tool named CryptoGuard that we developed to automatically detect API misuse in Java. We will also help participants install and use CryptoGuard plugins on their own machines and ask them for trials.By actively involving participants in code discussion and tool trial, we aim to raise the security awareness among developers, improve their secure coding capabilities, and equip them with the tools they need for secure coding." @default.
- W2901947009 created "2018-11-29" @default.
- W2901947009 creator A5028738303 @default.
- W2901947009 creator A5034366344 @default.
- W2901947009 creator A5047303372 @default.
- W2901947009 creator A5081377370 @default.
- W2901947009 creator A5090273664 @default.
- W2901947009 date "2020-09-01" @default.
- W2901947009 modified "2023-09-22" @default.
- W2901947009 title "Tutorial: Principles and Practices of Secure Cryptographic Coding in Java" @default.
- W2901947009 cites W2008810193 @default.
- W2901947009 cites W2118870447 @default.
- W2901947009 cites W2511044583 @default.
- W2901947009 cites W2759023773 @default.
- W2901947009 cites W2765671202 @default.
- W2901947009 cites W2766347289 @default.
- W2901947009 cites W2767943400 @default.
- W2901947009 cites W2887608739 @default.
- W2901947009 cites W2964144088 @default.
- W2901947009 cites W2984297109 @default.
- W2901947009 cites W2985320478 @default.
- W2901947009 doi "https://doi.org/10.1109/secdev45635.2020.00016" @default.
- W2901947009 hasPublicationYear "2020" @default.
- W2901947009 type Work @default.
- W2901947009 sameAs 2901947009 @default.
- W2901947009 citedByCount "0" @default.
- W2901947009 crossrefType "proceedings-article" @default.
- W2901947009 hasAuthorship W2901947009A5028738303 @default.
- W2901947009 hasAuthorship W2901947009A5034366344 @default.
- W2901947009 hasAuthorship W2901947009A5047303372 @default.
- W2901947009 hasAuthorship W2901947009A5081377370 @default.
- W2901947009 hasAuthorship W2901947009A5090273664 @default.
- W2901947009 hasConcept C111919701 @default.
- W2901947009 hasConcept C136764020 @default.
- W2901947009 hasConcept C178489894 @default.
- W2901947009 hasConcept C22680326 @default.
- W2901947009 hasConcept C29983905 @default.
- W2901947009 hasConcept C38652104 @default.
- W2901947009 hasConcept C41008148 @default.
- W2901947009 hasConcept C527648132 @default.
- W2901947009 hasConcept C548217200 @default.
- W2901947009 hasConcept C62913178 @default.
- W2901947009 hasConceptScore W2901947009C111919701 @default.
- W2901947009 hasConceptScore W2901947009C136764020 @default.
- W2901947009 hasConceptScore W2901947009C178489894 @default.
- W2901947009 hasConceptScore W2901947009C22680326 @default.
- W2901947009 hasConceptScore W2901947009C29983905 @default.
- W2901947009 hasConceptScore W2901947009C38652104 @default.
- W2901947009 hasConceptScore W2901947009C41008148 @default.
- W2901947009 hasConceptScore W2901947009C527648132 @default.
- W2901947009 hasConceptScore W2901947009C548217200 @default.
- W2901947009 hasConceptScore W2901947009C62913178 @default.
- W2901947009 hasLocation W29019470091 @default.
- W2901947009 hasOpenAccess W2901947009 @default.
- W2901947009 hasPrimaryLocation W29019470091 @default.
- W2901947009 hasRelatedWork W1517950588 @default.
- W2901947009 hasRelatedWork W1973601758 @default.
- W2901947009 hasRelatedWork W2008810193 @default.
- W2901947009 hasRelatedWork W2460396878 @default.
- W2901947009 hasRelatedWork W2536964484 @default.
- W2901947009 hasRelatedWork W2750778058 @default.
- W2901947009 hasRelatedWork W2766347289 @default.
- W2901947009 hasRelatedWork W2796472165 @default.
- W2901947009 hasRelatedWork W2887608739 @default.
- W2901947009 hasRelatedWork W2894351723 @default.
- W2901947009 hasRelatedWork W2900841422 @default.
- W2901947009 hasRelatedWork W2950742848 @default.
- W2901947009 hasRelatedWork W2952848714 @default.
- W2901947009 hasRelatedWork W3014817913 @default.
- W2901947009 hasRelatedWork W3038376610 @default.
- W2901947009 hasRelatedWork W3092327956 @default.
- W2901947009 hasRelatedWork W3094062523 @default.
- W2901947009 hasRelatedWork W3128132191 @default.
- W2901947009 hasRelatedWork W3138576616 @default.
- W2901947009 hasRelatedWork W3208610766 @default.
- W2901947009 isParatext "false" @default.
- W2901947009 isRetracted "false" @default.
- W2901947009 magId "2901947009" @default.
- W2901947009 workType "article" @default.