{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T00:08:54Z","timestamp":1743034134030,"version":"3.40.3"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030853464"},{"type":"electronic","value":"9783030853471"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-85347-1_37","type":"book-chapter","created":{"date-parts":[[2021,8,27]],"date-time":"2021-08-27T09:06:54Z","timestamp":1630055214000},"page":"521-535","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Exercise Perceptions: Experience Report from a Secure Software Development Course"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5056-757X","authenticated-orcid":false,"given":"Akond","family":"Rahman","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shahriar","family":"Hossain","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dibyendu Brinto","family":"Bose","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,8,25]]},"reference":[{"key":"37_CR1","doi-asserted-by":"publisher","DOI":"10.1017\/9781316771273","volume-title":"Introduction to Software Testing","author":"P Ammann","year":"2016","unstructured":"Ammann, P., Offutt, J.: Introduction to Software Testing. Cambridge University Press, Cambridge (2016)"},{"key":"37_CR2","unstructured":"Anonymous: Materials for the Secure Software Development Course, December 2020. https:\/\/figshare.com\/s\/f40c6df28ab2a2b55165"},{"issue":"1","key":"37_CR3","first-page":"5","volume":"1","author":"SK Beach","year":"2014","unstructured":"Beach, S.K.: Usable cybersecurity: human factors in cybersecurity education curricula. Nat. Cybersecur. Inst. J. 1(1), 5\u201315 (2014)","journal-title":"Nat. Cybersecur. Inst. J."},{"issue":"2","key":"37_CR4","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1145\/3089649.3089656","volume":"42","author":"T Bures","year":"2017","unstructured":"Bures, T., et al.: Software engineering for smart cyber-physical systems: challenges and promising solutions. ACM SIGSOFT Softw. Eng. Notes 42(2), 19\u201324 (2017)","journal-title":"ACM SIGSOFT Softw. Eng. Notes"},{"issue":"4","key":"37_CR5","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1109\/MSP.2010.127","volume":"8","author":"A Chuvakin","year":"2010","unstructured":"Chuvakin, A., Peterson, G.: How to do application logging right. IEEE Secur. Priv. 8(4), 82\u201385 (2010). https:\/\/doi.org\/10.1109\/MSP.2010.127","journal-title":"IEEE Secur. Priv."},{"issue":"1","key":"37_CR6","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1177\/001316446002000104","volume":"20","author":"J Cohen","year":"1960","unstructured":"Cohen, J.: A coefficient of agreement for nominal scales. Educ. Psychol. Measur. 20(1), 37\u201346 (1960). https:\/\/doi.org\/10.1177\/001316446002000104","journal-title":"Educ. Psychol. Measur."},{"issue":"1","key":"37_CR7","doi-asserted-by":"publisher","first-page":"53","DOI":"10.5381\/jot.2003.2.1.c6","volume":"2","author":"D Firesmith","year":"2003","unstructured":"Firesmith, D., et al.: Engineering security requirements. J. Object Technol. 2(1), 53\u201368 (2003)","journal-title":"J. Object Technol."},{"key":"37_CR8","doi-asserted-by":"publisher","unstructured":"Gupta, M.K., Govil, M.C., Singh, G.: Static analysis approaches to detect SQL injection and cross site scripting vulnerabilities in web applications: a survey. In: International Conference on Recent Advances and Innovations in Engineering (ICRAIE-2014), pp. 1\u20135 (2014). https:\/\/doi.org\/10.1109\/ICRAIE.2014.6909173","DOI":"10.1109\/ICRAIE.2014.6909173"},{"key":"37_CR9","doi-asserted-by":"publisher","unstructured":"King, J., Pandita, R., Williams, L.: Enabling forensics by proposing heuristics to identify mandatory log events. In: Proceedings of the 2015 Symposium and Bootcamp on the Science of Security, HotSoS 2015, Association for Computing Machinery, New York (2015). https:\/\/doi.org\/10.1145\/2746194.2746200","DOI":"10.1145\/2746194.2746200"},{"key":"37_CR10","unstructured":"Kumar, R.S.S., et al.: Adversarial machine learning-industry perspectives. arXiv preprint arXiv:2002.05646 (2020)"},{"issue":"1","key":"37_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2538029","volume":"14","author":"M Lukowiak","year":"2014","unstructured":"Lukowiak, M., Radziszowski, S., Vallino, J., Wood, C.: Cybersecurity education: bridging the gap between hardware and software domains. ACM Trans. Comput. Educ. 14(1), 1\u201320 (2014). https:\/\/doi.org\/10.1145\/2538029","journal-title":"ACM Trans. Comput. Educ."},{"key":"37_CR12","doi-asserted-by":"publisher","unstructured":"Mountrouidou, X., Li, X., Burke, Q.: Cybersecurity in liberal arts general education curriculum. In: Proceedings of the 23rd Annual ACM Conference on Innovation and Technology in Computer Science Education, ITiCSE 2018, pp. 182\u2013187. Association for Computing Machinery, New York (2018). https:\/\/doi.org\/10.1145\/3197091.3197110","DOI":"10.1145\/3197091.3197110"},{"key":"37_CR13","unstructured":"NIETP: NIETP About CAE Program (2020). https:\/\/www.iad.gov\/nietp\/CAERequirements.cfm. Accessed 18 Dec 2020"},{"key":"37_CR14","unstructured":"Olano, M., et al.: SecurityEmpire: development and evaluation of a digital game to promote cybersecurity education. In: 2014 USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE 14). USENIX Association, San Diego, August 2014. https:\/\/www.usenix.org\/conference\/3gse14\/summit-program\/presentation\/olano"},{"issue":"19","key":"37_CR15","doi-asserted-by":"publisher","first-page":"3997","DOI":"10.3390\/app9193997","volume":"9","author":"MMH Onik","year":"2019","unstructured":"Onik, M.M.H., Kim, C.S., Lee, N.Y., Yang, J.: Personal information classification on aggregated android application\u2019s permissions. Appl. Sci. 9(19), 3997 (2019)","journal-title":"Appl. Sci."},{"issue":"1","key":"37_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3408897","volume":"30","author":"A Rahman","year":"2021","unstructured":"Rahman, A., Rahman, M.R., Parnin, C., Williams, L.: Security smells in ansible and chef scripts: a replication study. ACM Trans. Softw. Eng. Methodol. 30(1), 1\u201331 (2021). https:\/\/doi.org\/10.1145\/3408897","journal-title":"ACM Trans. Softw. Eng. Methodol."},{"key":"37_CR17","unstructured":"Saldana, J.: The Coding Manual for Qualitative Researchers. Sage (2015)"},{"key":"37_CR18","doi-asserted-by":"crossref","unstructured":"Theisen, C., Williams, L., Oliver, K., Murphy-Hill, E.: Software security education at scale. In: Proceedings of the 38th International Conference on Software Engineering Companion, pp. 346\u2013355 (2016)","DOI":"10.1145\/2889160.2889186"},{"key":"37_CR19","doi-asserted-by":"publisher","unstructured":"Veneruso, S.V., Ferro, L.S., Marrella, A., Mecella, M., Catarci, T.: CyberVR: an interactive learning experience in virtual reality for cybersecurity related issues. In: Proceedings of the International Conference on Advanced Visual Interfaces, AVI 2020, Association for Computing Machinery, New York (2020). https:\/\/doi.org\/10.1145\/3399715.3399860","DOI":"10.1145\/3399715.3399860"},{"key":"37_CR20","unstructured":"Wood, C., Raj, R.: Keyloggers in cybersecurity education. In: Security and Management, pp. 293\u2013299. Citeseer (2010)"}],"container-title":["Communications in Computer and Information Science","Quality of Information and Communications Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-85347-1_37","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,27]],"date-time":"2021-08-27T09:23:54Z","timestamp":1630056234000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-85347-1_37"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030853464","9783030853471"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-85347-1_37","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"25 August 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"QUATIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Quality of Information and Communications Technology","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Algarve","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 September 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 September 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"quatic2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2021.quatic.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"98","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"31% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}