Empirical Research for Software Security: Foundations and Experience

Developing secure software requires the integration of numerous methods and tools into the development process, and software design is based on shared expert knowledge, claims, and opinions. Empirical methods, including data analytics, allow extracting knowledge and insights from the data that organizations collect from their processes and tools, and from the opinions of the experts who practice these processes and methods. This book introduces the reader to the fundamentals of empirical research methods, and demonstrates how these methods can be used to hone a secure software development lifecycle based on empirical data and published best practices.

Table of Contents

Chapter 1: Empirical Research On Security And Privacy By Design
Chapter 2: Guidelines For Systematic Mapping Studies In Security Engineering
Chapter 3: An Introduction To Data Analytics For Software Security
Chapter 4: Generating Software Security Knowledge Through Empirical Methods
Chapter 5: Visual Analytics: Foundations And Experiences In Malware Analysis
Chapter 6: Analysis Of Metrics For Classification Accuracy In Intrusion Detection
Chapter 7: The Building Security In Maturity Model As A Research Tool
Chapter 8: Agile Test Automation For Web Applications— A Security Perspective
Chapter 9: Benchmark For Empirical Evaluation Of Web Application Anomaly Detectors
Chapter 10: Threats To Validity In Empirical Software Security Research