{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:23:59Z","timestamp":1750220639128,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":32,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,4,15]],"date-time":"2020-04-15T00:00:00Z","timestamp":1586908800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Norges Forskningsr\u00e5d","award":["247678"],"award-info":[{"award-number":["247678"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,4,15]]},"DOI":"10.1145\/3383219.3383267","type":"proceedings-article","created":{"date-parts":[[2020,5,4]],"date-time":"2020-05-04T07:51:02Z","timestamp":1588578662000},"page":"360-365","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Achieving \"Good Enough\" Software Security"],"prefix":"10.1145","author":[{"given":"Inger Anne","family":"T\u00f8ndel","sequence":"first","affiliation":[{"name":"Norwegian University of Science and Technology (NTNU), Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniela Soares","family":"Cruzes","sequence":"additional","affiliation":[{"name":"SINTEF Digital, Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin Gilje","family":"Jaatun","sequence":"additional","affiliation":[{"name":"SINTEF Digital, Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,4,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54045-0_17"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2011.82"},{"key":"e_1_3_2_1_3_1","unstructured":"Kent Beck Mike Beedle Arie Van Bennekum Alistair Cockburn Ward Cunningham Martin Fowler James Grenning Jim Highsmith Andrew Hunt Ron Jeffries et al. 2001. Manifesto for agile software development. Online at http:\/\/www.agilemanifesto.org (2001).  Kent Beck Mike Beedle Arie Van Bennekum Alistair Cockburn Ward Cunningham Martin Fowler James Grenning Jim Highsmith Andrew Hunt Ron Jeffries et al. 2001. Manifesto for agile software development. Online at http:\/\/www.agilemanifesto.org (2001)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Stefan Beissel et al. 2016. Cybersecurity investments. Springer.  Stefan Beissel et al. 2016. Cybersecurity investments. Springer.","DOI":"10.1007\/978-3-319-30460-1"},{"volume-title":"First ACM Workshop on Business Driven Security Engineering (BizSec)","year":"2003","author":"Beznosov Konstantin","key":"e_1_3_2_1_5_1"},{"key":"e_1_3_2_1_6_1","unstructured":"Ann Cavoukian et al. 2009. Privacy by design: The 7 foundational principles. Information and Privacy Commissioner of Ontario Canada 5 (2009).  Ann Cavoukian et al. 2009. Privacy by design: The 7 foundational principles. Information and Privacy Commissioner of Ontario Canada 5 (2009)."},{"key":"e_1_3_2_1_7_1","unstructured":"Harry Collins. 2019. Forms of Life: The Method and Meaning of Sociology. MIT Press.  Harry Collins. 2019. Forms of Life: The Method and Meaning of Sociology. MIT Press."},{"volume-title":"Proceedings of the 5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security (HoTSoS '18)","year":"1906","author":"Cruzes Daniela S.","key":"e_1_3_2_1_8_1"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1093\/actrade\/9780199606696.001.0001"},{"key":"e_1_3_2_1_10_1","unstructured":"Davydd J Greenwood and Morten Levin. 2006. Introduction to action research: Social research for social change. SAGE publications.  Davydd J Greenwood and Morten Levin. 2006. Introduction to action research: Social research for social change. SAGE publications."},{"key":"e_1_3_2_1_11_1","unstructured":"Sandra Harding. 1991. Strong objectivity\" and socially situated knowledge. Whose science (1991) 138--163.  Sandra Harding. 1991. Strong objectivity\" and socially situated knowledge. Whose science (1991) 138--163."},{"key":"e_1_3_2_1_12_1","unstructured":"Lance Hayden. 2010. IT security metrics: A practical framework for measuring security & protecting data. Vol. 396. McGraw Hill New York.  Lance Hayden. 2010. IT security metrics: A practical framework for measuring security & protecting data. Vol. 396. McGraw Hill New York."},{"key":"e_1_3_2_1_13_1","first-page":"98","article-title":"Good Enough","volume":"49","author":"Hurlburt George","year":"2016","journal-title":"Security: The Best We'll Ever Have. Computer"},{"key":"e_1_3_2_1_14_1","first-page":"2013","article-title":"Information technology - Security techniques - Information security management systems - Requirements","volume":"27001","author":"ISO.","year":"2013","journal-title":"ISO\/IEC Standard"},{"key":"e_1_3_2_1_15_1","volume-title":"Lecture Notes in Computer Science","volume":"9290","author":"Jaatun Martin Gilje","year":"2015"},{"volume-title":"International Journal of Information Management","year":"2016","author":"Jaatun Martin Gilje","key":"e_1_3_2_1_16_1"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Yvonna S Lincoln and Egon G Guba. 1985. Naturalistic inquiry. Sage Publications Inc.  Yvonna S Lincoln and Egon G Guba. 1985. Naturalistic inquiry. Sage Publications Inc.","DOI":"10.1016\/0147-1767(85)90062-8"},{"volume-title":"Technical Report. Synopsys","author":"McGraw Gary","key":"e_1_3_2_1_18_1"},{"key":"e_1_3_2_1_19_1","unstructured":"Matthew B. Miles and A. Michael Huberman. 1994. Qualitative data analysis: An expanded sourcebook (2nd ed.). Sage.  Matthew B. Miles and A. Michael Huberman. 1994. Qualitative data analysis: An expanded sourcebook (2nd ed.). Sage."},{"volume-title":"Objective Knowledge: An Evolutionary Approach","year":"1972","author":"Popper Karl R","key":"e_1_3_2_1_20_1"},{"key":"e_1_3_2_1_21_1","first-page":"49","article-title":"What is ethics in research & why is it important","volume":"1","author":"Resnik David B","year":"2011","journal-title":"National Institute of Environmental Health Sciences"},{"key":"e_1_3_2_1_22_1","unstructured":"Colin Robson. 2011. Real World Research (3 ed.). John Wiley & Sons.  Colin Robson. 2011. Real World Research (3 ed.). John Wiley & Sons."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.futures.2014.10.011"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2003.1167341"},{"volume-title":"Threat Modeling: Designing for Security","year":"2014","author":"Shostack Adam","key":"e_1_3_2_1_25_1"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/REW.2017.54"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"Inger Anne T\u00f8ndel Daniela Soares Cruzes Martin Gilje Jaatun and Kalle Rindell. 2019. The Security Intention Meeting Series as a way to increase visibility of software security decisions in agile development projects. In Proceedings of the 14th International Conference on Availability Reliability and Security. ACM 59.  Inger Anne T\u00f8ndel Daniela Soares Cruzes Martin Gilje Jaatun and Kalle Rindell. 2019. The Security Intention Meeting Series as a way to increase visibility of software security decisions in agile development projects. In Proceedings of the 14th International Conference on Availability Reliability and Security. ACM 59.","DOI":"10.1145\/3339252.3340337"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.4018\/IJSSE.2017100101"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.118"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00199-4_11"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2018.290110854"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.58"}],"event":{"name":"EASE '20: Evaluation and Assessment in Software Engineering","sponsor":["NTNU Norwegian University of Science and Technology"],"location":"Trondheim Norway","acronym":"EASE '20"},"container-title":["Proceedings of the Evaluation and Assessment in Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3383219.3383267","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3383219.3383267","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:01Z","timestamp":1750197721000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3383219.3383267"}},"subtitle":["The Role of Objectivity"],"short-title":[],"issued":{"date-parts":[[2020,4,15]]},"references-count":32,"alternative-id":["10.1145\/3383219.3383267","10.1145\/3383219"],"URL":"https:\/\/doi.org\/10.1145\/3383219.3383267","relation":{},"subject":[],"published":{"date-parts":[[2020,4,15]]},"assertion":[{"value":"2020-04-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}