{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,21]],"date-time":"2026-09-21T19:01:27Z","timestamp":1790017287910,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":118,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,4,21]],"date-time":"2020-04-21T00:00:00Z","timestamp":1587427200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,4,21]]},"DOI":"10.1145\/3313831.3376754","type":"proceedings-article","created":{"date-parts":[[2020,5,27]],"date-time":"2020-05-27T15:28:08Z","timestamp":1590593288000},"page":"1-20","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":28,"title":["Building and Validating a Scale for Secure Software Development Self-Efficacy"],"prefix":"10.1145","author":[{"given":"Daniel","family":"Votipka","sequence":"first","affiliation":[{"name":"University of Maryland, College Park, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Desiree","family":"Abrokwa","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michelle L.","family":"Mazurek","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,4,23]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.52"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"e_1_3_2_2_3_1","volume-title":"Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS '17)","author":"Acar Yasemin","year":"2017","unstructured":"Yasemin Acar, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, and Sascha Fahl. 2017. Security Developer Studies with GitHub Users: Exploring a Convenience Sample. In Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS '17). USENIX Association, Santa Clara, CA, 81--95. https:\/\/www.usenix.org\/conference\/soups2017\/ technical-sessions\/presentation\/acar"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1177\/014662168500900205"},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300519"},{"key":"e_1_3_2_2_6_1","volume-title":"Deciding on the ratio of number of subjects to number of variables in factor analysis. Multivariate Experimental Clinical Research","author":"Baggaley Andrew R","year":"1983","unstructured":"Andrew R Baggaley. 1983. Deciding on the ratio of number of subjects to number of variables in factor analysis. Multivariate Experimental Clinical Research (1983)."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF02723327"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1184\/R1"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236061"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15326985ep2802_3"},{"key":"e_1_3_2_2_11_1","volume-title":"The observation to variable ratio in factor analysis","author":"Barrett Paul T","year":"1981","unstructured":"Paul T Barrett and Paul Kline. 1981. The observation to variable ratio in factor analysis. Personality Study & Group Behaviour (1981)."},{"key":"e_1_3_2_2_12_1","volume-title":"Comparative fit indexes in structural models. Psychological bulletin 107, 2","author":"Bentler Peter M","year":"1990","unstructured":"Peter M Bentler. 1990. Comparative fit indexes in structural models. Psychological bulletin 107, 2 (1990), 238."},{"key":"e_1_3_2_2_13_1","volume-title":"Significance tests and goodness of fit in the analysis of covariance structures. Psychological bulletin 88, 3","author":"Bentler Peter M","year":"1980","unstructured":"Peter M Bentler and Douglas G Bonett. 1980. Significance tests and goodness of fit in the analysis of covariance structures. Psychological bulletin 88, 3 (1980), 588."},{"key":"e_1_3_2_2_14_1","volume-title":"Proceedings of the 3rd USENIX Workshop on Advances in Security Education (ASE '18)","author":"Bock Kevin","year":"2018","unstructured":"Kevin Bock, George Hughey, and Dave Levin. 2018. King of the Hill: A Novel Cybersecurity Competition for Teaching Penetration Testing. In Proceedings of the 3rd USENIX Workshop on Advances in Security Education (ASE '18). USENIX Association, Baltimore, MD. https:\/\/www.usenix.org\/conference\/ase18\/presentation\/bock"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1002\/9781118619179"},{"key":"e_1_3_2_2_16_1","volume-title":"Environment and culture","author":"Brislin Richard W","unstructured":"Richard W Brislin. 1980. Cross-cultural research methods. In Environment and culture. Springer, 47--82."},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1015297914742"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15327752jpa4803_13"},{"key":"e_1_3_2_2_19_1","volume-title":"Regression analysis of count data","author":"Colin Cameron A","unstructured":"A Colin Cameron and Pravin K Trivedi. 2013. Regression analysis of count data. Vol. 53. Cambridge university press."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1177\/1541931215591170"},{"key":"e_1_3_2_2_21_1","volume-title":"Analyzing models with unobserved variables. Social measurement: Current issues 80","author":"Carmines Edward G","year":"1981","unstructured":"Edward G Carmines and John McIver. 1981. Analyzing models with unobserved variables. Social measurement: Current issues 80 (1981)."},{"key":"e_1_3_2_2_22_1","volume-title":"Factor analysis: An introduction and manual for the psychologist and social scientist","author":"Cattell Raymond B.","unstructured":"Raymond B. Cattell. 1952. Factor analysis: An introduction and manual for the psychologist and social scientist. Harper & Row, New York."},{"key":"e_1_3_2_2_23_1","unstructured":"Center for Cyber Safety and Education. 2017. Global Information Security Workforce Study. Technical Report. Center for Cyber Safety and Education Clearwater FL. https:\/\/iamcybersafe.org\/wp-content\/uploads\/2017\/07\/N-America-GISWS-Report.pdf"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15327906mbr1201_3"},{"key":"e_1_3_2_2_25_1","unstructured":"Pravir Chandra. 2017. Software Assurance Maturity Model. Technical Report. Open Web Application Security Project."},{"key":"e_1_3_2_2_26_1","volume-title":"Proceedings of the 2nd USENIX Workshop on Advances in Security Education (ASE '17)","author":"Feng Wu","year":"2017","unstructured":"Wu chang Feng, Robert Liebman, Lois Delcambre, Michael Lupro, Tim Sheard, Scott Britell, and Gerald Recktenwald. 2017. CyberPDX: A Camp for Broadening Participation in Cybersecurity. In Proceedings of the 2nd USENIX Workshop on Advances in Security Education (ASE '17). USENIX Association, Vancouver, BC. https:\/\/www.usenix.org\/conference\/ ase17\/workshop-program\/presentation\/feng"},{"key":"e_1_3_2_2_27_1","volume-title":"Proceedings of the 1st USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE '14)","author":"Chapman Peter","year":"2014","unstructured":"Peter Chapman, Jonathan Burket, and David Brumley. 2014. PicoCTF: A Game-Based Computer Security Competition for High School Students. In Proceedings of the 1st USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE '14). USENIX Association, San Diego, CA. http:\/\/www.usenix.org\/conference\/3gse14\/summit-program\/presentation\/chapman"},{"key":"e_1_3_2_2_28_1","volume-title":"Proceedings of the 1st USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE '14)","author":"Chung Kevin","year":"2014","unstructured":"Kevin Chung and Julian Cohen. 2014. Learning Obstacles in the Capture The Flag Model. In Proceedings of the 1st USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE '14). USENIX Association, San Diego, CA. https:\/\/www.usenix.org\/conference\/3gse14\/ summit-program\/presentation\/chung"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.4324\/9780203771587"},{"key":"e_1_3_2_2_30_1","volume-title":"13th Annual State of Agile Report. https:\/\/www.stateofagile.com\/ #ufh-i-521251909--13th-annual-state-of-agile-report\/ 473508. (2019)","unstructured":"CollabNet. 2019. 13th Annual State of Agile Report. https:\/\/www.stateofagile.com\/ #ufh-i-521251909--13th-annual-state-of-agile-report\/ 473508. (2019)."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.4324\/9781315827506"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1037\/0022-006X.46.4.648"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1037\/h0047358"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134059"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243794"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.139"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.83"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702249"},{"key":"e_1_3_2_2_39_1","volume-title":"The Cambridge dictionary of statistics","author":"Everitt Brian S","unstructured":"Brian S Everitt and Anders Skrondal. 2010. The Cambridge dictionary of statistics. New York University."},{"key":"e_1_3_2_2_40_1","volume-title":"Evaluating the use of exploratory factor analysis in psychological research. Psychological methods 4, 3","author":"Fabrigar Leandre R","year":"1999","unstructured":"Leandre R Fabrigar, Duane T Wegener, Robert C MacCallum, and Erin J Strahan. 1999. Evaluating the use of exploratory factor analysis in psychological research. Psychological methods 4, 3 (1999), 272."},{"key":"e_1_3_2_2_41_1","volume-title":"Proceedings of the 5th Symposium on Usable Privacy and Security (SOUPS '19)","author":"Faklaris Cori","year":"2019","unstructured":"Cori Faklaris, Laura A. Dabbish, and Jason I. Hong. 2019. A Self-Report Measure of End-User Security Attitudes (SA-6). In Proceedings of the 5th Symposium on Usable Privacy and Security (SOUPS '19). USENIX Association, Santa Clara, CA. https:\/\/www.usenix.org\/conference\/soups2019\/presentation\/faklaris"},{"key":"e_1_3_2_2_42_1","unstructured":"The Association for Computing Machinery. 2019. Chapters. https:\/\/acm.org\/chapters. (2019)."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1177\/002224378101800104"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287324.3287471"},{"key":"e_1_3_2_2_45_1","volume-title":"Factor Analysis","author":"Gorsuch Richard L.","unstructured":"Richard L. Gorsuch. 1978. Factor Analysis (2nd ed.). Erlbaum, Hillsdale, NJ.","edition":"2"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/978--1--4613-0893--5_6"},{"key":"e_1_3_2_2_47_1","volume-title":"Relation of sample size to the stability of component patterns. Psychological bulletin 103, 2","author":"Guadagnoli Edward","year":"1988","unstructured":"Edward Guadagnoli and Wayne F Velicer. 1988. Relation of sample size to the stability of component patterns. Psychological bulletin 103, 2 (1988), 265."},{"key":"e_1_3_2_2_48_1","unstructured":"Joy Paul Guilford. 1954. Psychometric methods. (1954)."},{"key":"e_1_3_2_2_49_1","unstructured":"Joseph F Hair William C Black Barry J Babin Rolph E Anderson Ronald L Tatham and others. 2006. Multivariate data analysis. (2006)."},{"key":"e_1_3_2_2_50_1","volume-title":"Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18)","author":"Julie","year":"2018","unstructured":"Julie M. Haney and Wayne G. Lutters. 2018. \"It's Scary...It's Confusing...It's Dull\": How Cybersecurity Advocates Overcome Negative Perceptions of Security. In Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18). USENIX Association, Baltimore, MD, 411--425. https:\/\/www.usenix.org\/conference\/soups2018\/ presentation\/haney-perceptions"},{"key":"e_1_3_2_2_51_1","volume-title":"Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18). USENIX Association, Baltimore, MD, 357--373. https:\/\/www.usenix.org\/ conference\/soups2018\/presentation\/haney-mindsets","author":"Haney Julie M.","year":"2018","unstructured":"Julie M. Haney, Mary Theofanos, Yasemin Acar, and Sandra Spickard Prettyman. 2018. \"We make it a big deal in the company\": Security Mindsets in Organizations that Develop Cryptographic Products. In Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18). USENIX Association, Baltimore, MD, 357--373. https:\/\/www.usenix.org\/ conference\/soups2018\/presentation\/haney-mindsets"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.28945\/244"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106270"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1177\/109634809702100108"},{"key":"e_1_3_2_2_55_1","first-page":"65","article-title":"A Simple Sequentially Rejective Multiple Test Procedure","volume":"6","author":"Holm Sture","year":"1979","unstructured":"Sture Holm. 1979. A Simple Sequentially Rejective Multiple Test Procedure. Scandinavian Journal of Statistics 6, 2 (1979), 65--70. http:\/\/www.jstor.org\/stable\/4615733","journal-title":"Scandinavian Journal of Statistics"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF02289447"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2818048.2819936"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.14722\/eurousec"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3159450.3159591"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2013.6606613"},{"key":"e_1_3_2_2_61_1","unstructured":"Melanie Jones. 2019. Why cybersecurity education matters. https:\/\/www.itproportal.com\/features\/why-cybersecurity-education-matters\/. (2019)."},{"key":"e_1_3_2_2_62_1","unstructured":"Karl G J\u00f6reskog and Dag S\u00f6rbom. 1993. LISREL 8: Structural equation modeling with the SIMPLIS command language. Scientific Software International."},{"key":"e_1_3_2_2_63_1","unstructured":"Lindsay Kolowich. 2017. The Demographics of Developers Around the World. https:\/\/blog.hubspot.com\/marketing\/developers-demographic-survey. (2017)."},{"key":"e_1_3_2_2_64_1","volume-title":"CrySL: Validating Correct Usage of Cryptographic APIs. CoRR abs\/1710.00564","author":"Kr\u00fcger Stefan","year":"2017","unstructured":"Stefan Kr\u00fcger, Johannes Sp\u00e4th, Karim Ali, Eric Bodden, and Mira Mezini. 2017. CrySL: Validating Correct Usage of Cryptographic APIs. CoRR abs\/1710.00564 (2017). http:\/\/arxiv.org\/abs\/1710.00564"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1177\/001316447503500301"},{"key":"e_1_3_2_2_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806799.1806829"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287324.3287450"},{"key":"e_1_3_2_2_68_1","volume-title":"Richard Jr J LeBlanc, and J Barrie Thompson","author":"Lethbridge Timothy C","year":"2007","unstructured":"Timothy C Lethbridge, Jorge Diaz-Herrera, Richard Jr J LeBlanc, and J Barrie Thompson. 2007. Improving software practice through education: Challenges and future trends. In Future of Software Engineering. IEEE Computer Society, 12--28."},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.5555\/2818754.2818839"},{"key":"e_1_3_2_2_70_1","unstructured":"Richard Harold Lindeman. 1980. Introduction to bivariate and multivariate analysis. Technical Report."},{"key":"e_1_3_2_2_71_1","unstructured":"LinkedIn. 2019. LinkedIn. https:\/\/linkedin.com\/. (2019)."},{"key":"e_1_3_2_2_72_1","volume-title":"Confirmatory factor analysis: A preface to LISREL","author":"Long J Scott","unstructured":"J Scott Long. 1983. Confirmatory factor analysis: A preface to LISREL. Vol. 33. Sage Publications."},{"key":"e_1_3_2_2_73_1","doi-asserted-by":"publisher","DOI":"10.2466\/pms.1983.56.2.371"},{"key":"e_1_3_2_2_74_1","volume-title":"Power analysis and determination of sample size for covariance structure modeling. Psychological methods 1, 2","author":"MacCallum Robert C","year":"1996","unstructured":"Robert C MacCallum, Michael W Browne, and Hazuki M Sugawara. 1996. Power analysis and determination of sample size for covariance structure modeling. Psychological methods 1, 2 (1996), 130."},{"key":"e_1_3_2_2_75_1","volume-title":"Multivariate statistics in the social sciences","author":"Maruscuilo LA","year":"1983","unstructured":"LA Maruscuilo and JR Levin. 1983. Multivariate statistics in the social sciences. Books\/Cole, Monterrey, California (1983)."},{"key":"e_1_3_2_2_76_1","unstructured":"Gary McGraw Sammy Migues and Jacob West. 2018. Building Security in Maturity Model. Technical Report. Open Web Application Security Project."},{"key":"e_1_3_2_2_77_1","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.314.7075.193"},{"key":"e_1_3_2_2_78_1","volume-title":"Identifying careless responses in survey data. Psychological methods 17, 3","author":"Meade Adam W","year":"2012","unstructured":"Adam W Meade and S Bartholomew Craig. 2012. Identifying careless responses in survey data. Psychological methods 17, 3 (2012), 437."},{"key":"e_1_3_2_2_79_1","unstructured":"Meetup. 2019. We are what we do | Meetup. https:\/\/www.meetup.com\/. (2019)."},{"key":"e_1_3_2_2_80_1","unstructured":"Microsoft. 2019. Microsoft Security Development Lifecycle Practices. https:\/\/www.microsoft.com\/en-us\/securityengineering\/sdl\/practices. (2019)."},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300370"},{"key":"e_1_3_2_2_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134082"},{"key":"e_1_3_2_2_83_1","volume-title":"Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18)","author":"Naiakshina Alena","year":"2018","unstructured":"Alena Naiakshina, Anastasia Danilova, Christian Tiefenau, and Matthew Smith. 2018. Deception Task Design in Developer Password Studies: Exploring a Student Sample. In Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18). USENIX Association, Baltimore, MD, 297--313. https:\/\/www.usenix.org\/conference\/soups2018\/presentation\/naiakshina"},{"key":"e_1_3_2_2_84_1","volume-title":"Scaling procedures: Issues and applications","author":"Netemeyer Richard G","unstructured":"Richard G Netemeyer, William O Bearden, and Subhash Sharma. 2003. Scaling procedures: Issues and applications. Sage Publications."},{"key":"e_1_3_2_2_85_1","unstructured":"William Newhouse Stephanie Keith Benjamin Scribner and Greg Witte. 2017. NIST Special Publication 800--181 The NICE Cybersecurity Workforce Framework. Technical Report. National Institute of Standards and Technology."},{"key":"e_1_3_2_2_86_1","volume-title":"Psychometric theory","author":"Nunnally Jum C","unstructured":"Jum C Nunnally. 1994. Psychometric theory (3rd ed.). Tata McGraw-Hill Education.","edition":"3"},{"key":"e_1_3_2_2_87_1","unstructured":"National Institute of Standards and Technology. 2019. Software and Supply Chain Assurance Forum - Cyber Supply Chain Risk Management | CSRC. https:\/\/csrc.nist.gov\/Projects\/Supply-Chain-Risk-Management\/SSCA. (2019)."},{"key":"e_1_3_2_2_88_1","volume-title":"Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18)","author":"Oliveira Daniela Seabra","year":"2018","unstructured":"Daniela Seabra Oliveira, Tian Lin, Muhammad Sajidur Rahman, Rad Akefirad, Donovan Ellis, Eliany Perez, Rahul Bobhate, Lois A. DeLong, Justin Cappos, and Yuriy Brun. 2018. API Blindspots: Why Experienced Developers Write Vulnerable Code. In Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS '18). USENIX Association, Baltimore, MD, 315--328. https:\/\/www.usenix.org\/conference\/soups2018\/presentation\/oliveira"},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jesp.2017.01.006"},{"key":"e_1_3_2_2_90_1","doi-asserted-by":"publisher","DOI":"10.1109\/FIE.2017.8190716"},{"key":"e_1_3_2_2_91_1","volume-title":"Bayesian model selection in social research. Sociological methodology","author":"Raftery Adrian E","year":"1995","unstructured":"Adrian E Raftery. 1995. Bayesian model selection in social research. Sociological methodology (1995), 111--163."},{"key":"e_1_3_2_2_92_1","doi-asserted-by":"publisher","DOI":"10.1027\/1614--2241"},{"key":"e_1_3_2_2_93_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15327906mbr3204_2"},{"key":"e_1_3_2_2_94_1","unstructured":"Tony Rice Josh Brown-White Tania Skinner Nick Ozmore Nazira Carlage Wendy Poland Eric Heitzman and Danny Dhillon. 2018. Fundamental Practices for Secure Software Development. Technical Report. Software Assurance Forum for Excellence in Code."},{"key":"e_1_3_2_2_95_1","volume-title":"Criteria for scale selection and evaluation. Measures of personality and social psychological attitudes 1, 3","author":"Robinson John P","year":"1991","unstructured":"John P Robinson, Phillip R Shaver, and Lawrence S Wrightsman. 1991. Criteria for scale selection and evaluation. Measures of personality and social psychological attitudes 1, 3 (1991), 1--16."},{"key":"e_1_3_2_2_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/2047594.2047628"},{"key":"e_1_3_2_2_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978382"},{"key":"e_1_3_2_2_98_1","doi-asserted-by":"publisher","DOI":"10.5555\/2818754.2818828"},{"key":"e_1_3_2_2_99_1","volume-title":"NFER-NELSON, Windsor","author":"Schwarzer Ralf","year":"1995","unstructured":"Ralf Schwarzer, Matthias Jerusalem, J Weinman, S Wright, and M Johnston. 1995. Measures in health psychology: A user's portfolio. Causal and control beliefs. Generalized Self-Efficacy Scal, NFER-NELSON, Windsor (1995), 35--37."},{"key":"e_1_3_2_2_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568244"},{"key":"e_1_3_2_2_101_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134105"},{"key":"e_1_3_2_2_102_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786812"},{"key":"e_1_3_2_2_103_1","volume-title":"Statistical methods","author":"Snedecor George W","year":"1989","unstructured":"George W Snedecor and Witiiam G Cochran. 1989. Statistical methods. Ames: Iowa State Univ. Press Iowa (1989)."},{"key":"e_1_3_2_2_104_1","volume-title":"StackOverflow Developer Survey Results","year":"2018","unstructured":"StackOverflow. 2018. StackOverflow Developer Survey Results 2018. https:\/\/insights.stackoverflow.com\/survey\/2018. (2018)."},{"key":"e_1_3_2_2_105_1","volume-title":"Using multivariate statistics","author":"Tabachnick Barbara G","unstructured":"Barbara G Tabachnick, Linda S Fidell, and Jodie B Ullman. 2007. Using multivariate statistics. Vol. 5. Pearson Boston, MA."},{"key":"e_1_3_2_2_106_1","volume-title":"Proceedings of the 2nd Workshop on Security Information Workers (WSIW '16). USENIX Association, Denver, CO. https:\/\/www.usenix.org\/conference\/soups2016\/ workshop-program\/wsiw16\/presentation\/thomas","author":"Thomas Tyler W.","year":"2016","unstructured":"Tyler W. Thomas, Heather Lipford, Bill Chu, Justin Smith, and Emerson Murphy-Hill. 2016. What Questions Remain? An Examination of How Developers Understand an Interactive Static Analysis Tool. In Proceedings of the 2nd Workshop on Security Information Workers (WSIW '16). USENIX Association, Denver, CO. https:\/\/www.usenix.org\/conference\/soups2016\/ workshop-program\/wsiw16\/presentation\/thomas"},{"key":"e_1_3_2_2_107_1","doi-asserted-by":"publisher","DOI":"10.1177\/0735633117746747"},{"key":"e_1_3_2_2_108_1","doi-asserted-by":"publisher","DOI":"10.1080\/10705519909540118"},{"key":"e_1_3_2_2_109_1","unstructured":"Upworki. 2017. Hire Freelancers Make Things Happen | Upwork. https:\/\/upwork.com. (2017)."},{"key":"e_1_3_2_2_110_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15327906mbr1703_5"},{"key":"e_1_3_2_2_111_1","volume-title":"Marco Tulio Valente, and Eduardo Figueiredo","author":"Viggiato Markos","year":"2018","unstructured":"Markos Viggiato, Ricardo Terra, Henrique Rocha, Marco Tulio Valente, and Eduardo Figueiredo. 2018. Microservices in Practice: A Survey Study. (2018)."},{"key":"e_1_3_2_2_112_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00003"},{"key":"e_1_3_2_2_113_1","volume-title":"Proceedings of the 3rd Workshop on Security Information Workers (WSIW '17)","author":"Watson Stacey","year":"2017","unstructured":"Stacey Watson and Heather Richter Lipford. 2017. A Proposed Visualization for Vulnerability Scan Data. In Proceedings of the 3rd Workshop on Security Information Workers (WSIW '17). USENIX Association, Santa Clara, CA. https:\/\/www.usenix.org\/conference\/soups2017\/workshop-program\/wsiw2017\/watson"},{"key":"e_1_3_2_2_114_1","volume-title":"Systematic data collection","author":"Weller Susan C","unstructured":"Susan C Weller and A Kimball Romney. 1988. Systematic data collection. Vol. 10. Sage publications."},{"key":"e_1_3_2_2_115_1","volume-title":"Proc. of the 4th Conference on Cyber Security Experimentation and Test (CSET'11)","author":"Werther Joseph","year":"2011","unstructured":"Joseph Werther, Michael Zhivich, Tim Leek, and Nickolai Zeldovich. 2011. Experiences in Cyber Security Education: The MIT Lincoln Laboratory Capture-the-flag Exercise. In Proc. of the 4th Conference on Cyber Security Experimentation and Test (CSET'11). USENIX Association, Berkeley, CA, USA, 12--12. http:\/\/dl.acm.org\/citation.cfm?id=2027999.2028011"},{"key":"e_1_3_2_2_116_1","doi-asserted-by":"publisher","DOI":"10.1145\/3210459.3210483"},{"key":"e_1_3_2_2_117_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786816"},{"key":"e_1_3_2_2_118_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2006.08.003"}],"event":{"name":"CHI '20: CHI Conference on Human Factors in Computing Systems","location":"Honolulu HI USA","acronym":"CHI '20","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3313831.3376754","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3313831.3376754","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3313831.3376754","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,21]],"date-time":"2026-09-21T18:10:21Z","timestamp":1790014221000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3313831.3376754"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,21]]},"references-count":118,"alternative-id":["10.1145\/3313831.3376754","10.1145\/3313831"],"URL":"https:\/\/doi.org\/10.1145\/3313831.3376754","relation":{},"subject":[],"published":{"date-parts":[[2020,4,21]]},"assertion":[{"value":"2020-04-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}