Weir, Charles and Rashid, Awais and Noble, James (2017) I'd Like to Have an Argument, Please : Using Dialectic for Effective App Security. In: EuroUSEC 2017 : the 2nd European Workshop on Usable Security. Internet Society, FRA. ISBN 1891562452
EuroUSec2017Paper.pdf - Published Version
Available under License Other.
Download (657kB)
Abstract
The lack of good secure development practice for app developers threatens everyone who uses mobile software. Current practice emphasizes checklists of processes and security errors to avoid, and has not proved effective in the application development domain. Based on analysis of interviews with relevant security experts, we suggest that secure app development requires 'dialectic': challenging dialog with a range of counterparties, continued throughout the development cycle. By further studying the different dialectic techniques possible in programmers' communications, we shall be able to empower app developers to produce the secure software that we need.