DLR secure software engineering

Software repositories contain information about source code, software development processes, and team interactions. We combine provenance of the development process with code security analysis to automatically discover insights. This provides fast feedback on the software's design and security issues, which we evaluate on projects that are developed under time pressure, such as Germany's COVID-19 contact tracing app 'Corona-Warn-App'. CCS CONCEPTS • Security and privacy → Software security engineering; • Software and its engineering → Software libraries and repositories; Software defect analysis; • Information systems → Data mining; • Human-centered computing → Open source software.

show abstract

DLR secure software engineering

Cited by 2 publications

References 1 publication

Provenance-Based Security Audits and Its Application to COVID-19 Contact Tracing Apps

Provenance-Based Security Audits and Its Application to COVID-19 Contact Tracing Apps

Towards automated, provenance-driven security audit for git-based repositories: applied to germany's corona-warn-app: vision paper

Contact Info

Product

Resources

About