{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,21]],"date-time":"2026-08-21T12:32:35Z","timestamp":1787315555253,"version":"build-2736575974"},"reference-count":187,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2021,9,28]],"date-time":"2021-09-28T00:00:00Z","timestamp":1632787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"UKRI\/EPSRC","award":["EP\/P011799\/1, EP\/P011799\/2, EP\/R013144\/1, and EP\/T017465\/1"],"award-info":[{"award-number":["EP\/P011799\/1, EP\/P011799\/2, EP\/R013144\/1, and EP\/T017465\/1"]}]},{"name":"NCSC"},{"name":"SFI","award":["13\/RC\/2094 and 16\/RC\/3918"],"award-info":[{"award-number":["13\/RC\/2094 and 16\/RC\/3918"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Softw. Eng. Methodol."],"published-print":{"date-parts":[[2022,1,31]]},"abstract":"<jats:p>Despite the availability of various methods and tools to facilitate secure coding, developers continue to write code that contains common vulnerabilities. It is important to understand why technological advances do not sufficiently facilitate developers in writing secure code. To widen our understanding of developers' behaviour, we considered the complexity of the security decision space of developers using theory from cognitive and social psychology. Our interdisciplinary study reported in this article (1) draws on the psychology literature to provide conceptual underpinnings for three categories of impediments to achieving security goals, (2) reports on an in-depth meta-analysis of existing software security literature that identified a catalogue of factors that influence developers' security decisions, and (3) characterises the landscape of existing security interventions that are available to the developer during coding and identifies gaps. Collectively, these show that different forms of impediments to achieving security goals arise from different contributing factors. Interventions will be more effective where they reflect psychological factors more sensitively and marry technical sophistication, psychological frameworks, and usability. Our analysis suggests \u201cadaptive security interventions\u201d as a solution that responds to the changing security needs of individual developers and a present a proof-of-concept tool to substantiate our suggestion.<\/jats:p>","DOI":"10.1145\/3471930","type":"journal-article","created":{"date-parts":[[2021,9,28]],"date-time":"2021-09-28T16:49:24Z","timestamp":1632847764000},"page":"1-52","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":24,"title":["The Case for Adaptive Security Interventions"],"prefix":"10.1145","volume":"31","author":[{"given":"Irum","family":"Rauf","sequence":"first","affiliation":[{"name":"School of Computingand Communications, The Open University, Milton Keynes, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marian","family":"Petre","sequence":"additional","affiliation":[{"name":"School of Computingand Communications, The Open University, Milton Keynes, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thein","family":"Tun","sequence":"additional","affiliation":[{"name":"School of Computingand Communications, The Open University, Milton Keynes, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tamara","family":"Lopez","sequence":"additional","affiliation":[{"name":"School of Computingand Communications, The Open University, Milton Keynes, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Lunn","sequence":"additional","affiliation":[{"name":"The University of Manchester, Manchester, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dirk","family":"Van Der Linden","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Sciences, Northumbria University, Newcastle-upon-Tyne, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"Towse","sequence":"additional","affiliation":[{"name":"Department of Psychology, University of Lancaster, Lancaster, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Helen","family":"Sharp","sequence":"additional","affiliation":[{"name":"School of Computing and Communications, The Open University, Milton Keynes, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Levine","sequence":"additional","affiliation":[{"name":"Department of Psychology, University of Lancaster, Lancaster, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"Bristol Cyber Security Group, University of Bristol, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bashar","family":"Nuseibeh","sequence":"additional","affiliation":[{"name":"School of Computing and Communications, The Open University, UK, Lero-The Irish Software Research Centre, Republic of Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,9,28]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Stack Overflow. 2019.Developer Survey Results. Retrieved from https:\/\/insights.stackoverflow.com\/survey\/2019.  Stack Overflow. 2019.Developer Survey Results. Retrieved from https:\/\/insights.stackoverflow.com\/survey\/2019."},{"key":"e_1_2_1_2_1","volume-title":"Retrieved","author":"Wichers Dave","year":"2020","unstructured":"Dave Wichers . 2020 . Free for Open Source Application Security Tools | OWASP . Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Free_for_Open_Source_Application_Security_Tools. Dave Wichers. 2020.Free for Open Source Application Security Tools | OWASP. Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Free_for_Open_Source_Application_Security_Tools."},{"key":"e_1_2_1_3_1","volume-title":"Retrieved","author":"OWASP.","year":"2020","unstructured":"OWASP. 2020 . Source Code Analysis Tools | OWASP . Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Source_Code_Analysis_Tools. OWASP. 2020.Source Code Analysis Tools | OWASP. Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Source_Code_Analysis_Tools."},{"key":"e_1_2_1_4_1","volume-title":"Retrieved","year":"2020","unstructured":"Veracode. 2020 . State Of Software Security . Retrieved January, 2020 from https:\/\/tinyurl.com\/uaa4ock. Veracode. 2020.State Of Software Security. Retrieved January, 2020 from https:\/\/tinyurl.com\/uaa4ock."},{"key":"e_1_2_1_5_1","volume-title":"Retrieved","author":"OWASP.","year":"2020","unstructured":"OWASP. 2020 . Vulnerability Scanning Tools | OWASP . Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Vulnerability_Scanning_Tools. OWASP. 2020.Vulnerability Scanning Tools | OWASP. Retrieved January, 2020 from https:\/\/owasp.org\/www-community\/Vulnerability_Scanning_Tools."},{"key":"e_1_2_1_6_1","volume-title":"Retrieved","year":"2020","unstructured":"Fortify. 2020 . Fortify Taxonomy: Software Security Errors . Retrieved January, 2020 from https:\/\/vulncat.fortify.com\/en.w. Fortify. 2020.Fortify Taxonomy: Software Security Errors. Retrieved January, 2020 from https:\/\/vulncat.fortify.com\/en.w."},{"key":"e_1_2_1_7_1","volume-title":"3rd European Conference on Knowledge Management.","author":"Abdullah Mohd Syazwan","year":"2002","unstructured":"Mohd Syazwan Abdullah , Ian Benest , Andy Evans , and Chris Kimble . 2002 . Knowledge modelling techniques for developing knowledge management systems . In 3rd European Conference on Knowledge Management. Mohd Syazwan Abdullah, Ian Benest, Andy Evans, and Chris Kimble. 2002. Knowledge modelling techniques for developing knowledge management systems. In 3rd European Conference on Knowledge Management."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.2044-8309.1990.tb00892.x"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.52"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.25"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/3235924.3235932"},{"key":"e_1_2_1_12_1","volume-title":"Developers need support, too: A survey of security advice for software developers","author":"Acar Yasemin","unstructured":"Yasemin Acar , Christian Stransky , Dominik Wermke , Charles Weir , Michelle L. Mazurek , and Sascha Fahl . 2017. Developers need support, too: A survey of security advice for software developers . In IEEE Cybersecurity Development (SecDev). IEEE , 22\u201326. Yasemin Acar, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, and Sascha Fahl. 2017. Developers need support, too: A survey of security advice for software developers. In IEEE Cybersecurity Development (SecDev). IEEE, 22\u201326."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/0749-5978(91)90020-T"},{"key":"e_1_2_1_14_1","unstructured":"I. Ajzen. 2015. The theory of planned behavior: A bibliography: 1985\u20132015. Retrieved fromhttps:\/\/people.umass.edu\/aizen\/tpbrefstxt.html.  I. Ajzen. 2015. The theory of planned behavior: A bibliography: 1985\u20132015. Retrieved fromhttps:\/\/people.umass.edu\/aizen\/tpbrefstxt.html."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2597999"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.4018\/jitwe.2012070101"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1037\/a0030986"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3418778"},{"key":"e_1_2_1_19_1","volume-title":"The Adaptive Character of Thought","author":"Anderson John Robert","unstructured":"John Robert Anderson . 1990. The Adaptive Character of Thought . Psychology Press . John Robert Anderson. 1990. The Adaptive Character of Thought. Psychology Press."},{"key":"e_1_2_1_20_1","volume-title":"Lebiere","author":"Anderson John R.","year":"2014","unstructured":"John R. Anderson and Christian J . Lebiere . 2014 . The Atomic Components of Thought. Psychology Press . John R. Anderson and Christian J. Lebiere. 2014. The Atomic Components of Thought. Psychology Press."},{"key":"e_1_2_1_21_1","volume-title":"BIOS Instant Notes in Cognitive Psychology","author":"Andrade Jackie","unstructured":"Jackie Andrade and Jon May . 2004. BIOS Instant Notes in Cognitive Psychology . Taylor & Francis . Jackie Andrade and Jon May. 2004. BIOS Instant Notes in Cognitive Psychology. Taylor & Francis."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.23"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/3291228.3291251"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300519"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2016.7739576"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neuroscience.2005.08.023"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2009.163"},{"key":"e_1_2_1_28_1","doi-asserted-by":"crossref","unstructured":"Alan Baddeley. 2007. Working Memory Thought and Action. Vol. 45. OuP Oxford.  Alan Baddeley. 2007. Working Memory Thought and Action. Vol. 45. OuP Oxford.","DOI":"10.1093\/acprof:oso\/9780198528012.001.0001"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.70"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23006"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.intcom.2010.07.003"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2007.09.004"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-50309-3_4"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.62"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/795687.797842"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1080\/13549839908725599"},{"key":"e_1_2_1_37_1","unstructured":"Andrew Booth Anthea Sutton and Diana Papaioannou. 2016. Systematic approaches to a successful literature review. SAGE. Retrieval: https:\/\/www.google.co.uk\/books\/edition\/_\/JD1DCgAAQBAJ?hl=en&gbpv=0.  Andrew Booth Anthea Sutton and Diana Papaioannou. 2016. Systematic approaches to a successful literature review. SAGE. Retrieval: https:\/\/www.google.co.uk\/books\/edition\/_\/JD1DCgAAQBAJ?hl=en&gbpv=0."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.5964\/ejop.v16i3.3107"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1177\/0013916518756988"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1111\/bjso.12349"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1882362.1882374"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1016\/0301-0511(95)05161-9"},{"key":"e_1_2_1_43_1","volume-title":"18th IEEE International Conference on Machine Learning and Applications (ICMLA). IEEE, 432\u2013437","author":"Camps Gadiel Sznaier","year":"2019","unstructured":"Gadiel Sznaier Camps , Nicolas Bohm Agostini , and David Kaeli . 2019 . Discovering programmer intention behind written source code . In 18th IEEE International Conference on Machine Learning and Applications (ICMLA). IEEE, 432\u2013437 . Gadiel Sznaier Camps, Nicolas Bohm Agostini, and David Kaeli. 2019. Discovering programmer intention behind written source code. In 18th IEEE International Conference on Machine Learning and Applications (ICMLA). IEEE, 432\u2013437."},{"key":"e_1_2_1_44_1","unstructured":"OWASP Foundation. 2020.Category: Vulnerability Scanning Tools - OWASP. Retrieved January 2020 from https:\/\/www.owasp.org\/index.php\/Category:Vulnerability_Scanning_Tools.  OWASP Foundation. 2020.Category: Vulnerability Scanning Tools - OWASP. Retrieved January 2020 from https:\/\/www.owasp.org\/index.php\/Category:Vulnerability_Scanning_Tools."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00065"},{"key":"e_1_2_1_46_1","unstructured":"Robert B. Cialdini. 1985. Influence. Scott Foresman and Company Glenview IL.  Robert B. Cialdini. 1985. Influence. Scott Foresman and Company Glenview IL."},{"key":"e_1_2_1_47_1","volume-title":"Reno","author":"Cialdini Robert B.","year":"1991","unstructured":"Robert B. Cialdini , Carl A. Kallgren , and Raymond R . Reno . 1991 . A focus theory of normative conduct: A theoretical refinement and reevaluation of the role of norms in human behavior. In Advances in Experimental Social Psychology. Vol. 24 . Academic Press , San Diego, CA, 201\u2013234. Robert B. Cialdini, Carl A. Kallgren, and Raymond R. Reno. 1991. A focus theory of normative conduct: A theoretical refinement and reevaluation of the role of norms in human behavior. In Advances in Experimental Social Psychology. Vol. 24. Academic Press, San Diego, CA, 201\u2013234."},{"key":"e_1_2_1_48_1","volume-title":"Trost","author":"Cialdini Robert B.","year":"1998","unstructured":"Robert B. Cialdini and Melanie R . Trost . 1998 . Social influence: Social norms, conformity and compliance. In Handbook of Social Psychology. Vol. 2 , D. T. Gilbert, S. T. Fiske, G. Lindzey (Eds.). McGraw-Hill , Boston, MA, 151\u2013192). Robert B. Cialdini and Melanie R. Trost. 1998. Social influence: Social norms, conformity and compliance. In Handbook of Social Psychology. Vol. 2, D. T. Gilbert, S. T. Fiske, G. Lindzey (Eds.). McGraw-Hill, Boston, MA, 151\u2013192)."},{"key":"e_1_2_1_49_1","volume-title":"Variation in Working Memory","author":"Conway Andrew","unstructured":"Andrew Conway , Chris Jarrold , Michael Kane , Akira Miyake , and John Towse . 2008. Variation in Working Memory . Oxford University Press . Andrew Conway, Chris Jarrold, Michael Kane, Akira Miyake, and John Towse. 2008. Variation in Working Memory. Oxford University Press."},{"key":"e_1_2_1_50_1","volume-title":"Retrieved","author":"The MITRE Corporation","year":"2020","unstructured":"The MITRE Corporation . 2020. Cybersecurity Resources . Retrieved January 2020 from https:\/\/www.mitre.org\/capabilities\/cybersecurity\/overview\/cybersecurity-resources. The MITRE Corporation. 2020.Cybersecurity Resources. Retrieved January 2020 from https:\/\/www.mitre.org\/capabilities\/cybersecurity\/overview\/cybersecurity-resources."},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00069"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1147\/sj.372.0227"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2014.12.008"},{"key":"e_1_2_1_54_1","volume-title":"Retrieved","author":"Common Vulnerabilities CVE","year":"2020","unstructured":"CVE - Common Vulnerabilities and Exposures (CVE). 2020. Retrieved January 2020 from https:\/\/cve.mitre.org\/. CVE - Common Vulnerabilities and Exposures (CVE). 2020. Retrieved January 2020 from https:\/\/cve.mitre.org\/."},{"key":"e_1_2_1_55_1","first-page":"450","article-title":"Individual differences in working memory and reading","volume":"19","author":"Daneman Meredyth","year":"1980","unstructured":"Meredyth Daneman and Patricia A. Carpenter . 1980 . Individual differences in working memory and reading . J. Mem. Lang. 19 , 4 (1980), 450 . Meredyth Daneman and Patricia A. Carpenter. 1980. Individual differences in working memory and reading. J. Mem. Lang. 19, 4 (1980), 450.","journal-title":"J. Mem. Lang."},{"key":"e_1_2_1_56_1","volume-title":"Software Engineering for Self-Adaptive Systems(Dagstuhl Seminar Proceedings","author":"de Lemos Rog\u00e9rio","year":"2010","unstructured":"Rog\u00e9rio de Lemos , Holger Giese , Hausi A. M\u00fcller , Mary Shaw , Jesper Andersson , Luciano Baresi , Basil Becker , Nelly Bencomo , Yuriy Brun , Bojan Cukic , Ronald J. Desmarais , Schahram Dustdar , Gregor Engels , Kurt Geihs , Karl M. G\u00f6schka , Alessandra Gorla , Vincenzo Grassi , Paola Inverardi , Gabor Karsai , Jeff Kramer , Marin Litoiu , Ant\u00f3nia Lopes , Jeff Magee , Sam Malek , Serge Mankovskii , Raffaela Mirandola , John Mylopoulos , Oscar Nierstrasz , and Ma. 2010 . Software engineering for self-adaptive systems: A second research roadmap . In Software Engineering for Self-Adaptive Systems(Dagstuhl Seminar Proceedings , Vol. 10431), Rog\u00e9rio de Lemos, Holger Giese, Hausi A. M\u00fcller, and Mary Shaw (Eds.). Schloss Dagstuhl - Leibniz-Zentrum f\u00fcr Informatik, Germany. Retrieved from http:\/\/drops.dagstuhl.de\/opus\/volltexte\/2011\/3156\/. Rog\u00e9rio de Lemos, Holger Giese, Hausi A. M\u00fcller, Mary Shaw, Jesper Andersson, Luciano Baresi, Basil Becker, Nelly Bencomo, Yuriy Brun, Bojan Cukic, Ronald J. Desmarais, Schahram Dustdar, Gregor Engels, Kurt Geihs, Karl M. G\u00f6schka, Alessandra Gorla, Vincenzo Grassi, Paola Inverardi, Gabor Karsai, Jeff Kramer, Marin Litoiu, Ant\u00f3nia Lopes, Jeff Magee, Sam Malek, Serge Mankovskii, Raffaela Mirandola, John Mylopoulos, Oscar Nierstrasz, and Ma. 2010. Software engineering for self-adaptive systems: A second research roadmap. In Software Engineering for Self-Adaptive Systems(Dagstuhl Seminar Proceedings, Vol. 10431), Rog\u00e9rio de Lemos, Holger Giese, Hausi A. M\u00fcller, and Mary Shaw (Eds.). Schloss Dagstuhl - Leibniz-Zentrum f\u00fcr Informatik, Germany. Retrieved from http:\/\/drops.dagstuhl.de\/opus\/volltexte\/2011\/3156\/."},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.psych.093008.100445"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/1348713.1348716"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1006\/cogp.1996.0008"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516693"},{"key":"e_1_2_1_61_1","unstructured":"Hewlett Packard Enterprise. 2015.Awareness is only the first step: A framework for progressive engagement of staff in cyber security. Retrieved from https:\/\/www.riscs.org.uk\/wp-content\/uploads\/2015\/12\/Awareness-is-Only-the-First- 1713Step.pdf.  Hewlett Packard Enterprise. 2015.Awareness is only the first step: A framework for progressive engagement of staff in cyber security. Retrieved from https:\/\/www.riscs.org.uk\/wp-content\/uploads\/2015\/12\/Awareness-is-Only-the-First- 1713Step.pdf."},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/3468.952715"},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.31"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC.2007.63"},{"key":"e_1_2_1_65_1","first-page":"271","article-title":"Action as the core of work psychology: A German approach","volume":"4","author":"Frese Michael","year":"1994","unstructured":"Michael Frese and Dieter Zapf . 1994 . Action as the core of work psychology: A German approach . Handb. Industr. Organiz. Psychol. 4 , 2 (1994), 271 \u2013 340 . Michael Frese and Dieter Zapf. 1994. Action as the core of work psychology: A German approach. Handb. Industr. Organiz. Psychol. 4, 2 (1994), 271\u2013340.","journal-title":"Handb. Industr. Organiz. Psychol."},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.artint.2010.05.005"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/MTS.2013.2241294"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/1292414.1292416"},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.5555\/3291228.3291250"},{"key":"e_1_2_1_70_1","first-page":"259","article-title":"The theory of reasoned action","volume":"14","author":"Hale Jerold L.","year":"2002","unstructured":"Jerold L. Hale , Brian J. Householder , and Kathryn L. Greene . 2002 . The theory of reasoned action . Persuas. Handb.: Devel. Theor. Pract. 14 (2002), 259 \u2013 286 . Jerold L. Hale, Brian J. Householder, and Kathryn L. Greene. 2002. The theory of reasoned action. Persuas. Handb.: Devel. Theor. Pract. 14 (2002), 259\u2013286.","journal-title":"Persuas. Handb.: Devel. Theor. Pract."},{"key":"e_1_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70754"},{"key":"e_1_2_1_72_1","volume-title":"Symposium on Usable Privacy and Security (SOUPS'17)","author":"Julie","unstructured":"Julie M. Haney and Wayne G. Lutters. 2017. Skills and characteristics of successful cybersecurity advocates . In Symposium on Usable Privacy and Security (SOUPS'17) . Julie M. Haney and Wayne G. Lutters. 2017. Skills and characteristics of successful cybersecurity advocates. In Symposium on Usable Privacy and Security (SOUPS'17)."},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.5555\/3291228.3291257"},{"key":"e_1_2_1_74_1","volume-title":"Psychology in Organizations: The Social Identity Approach","author":"Haslam S. Alexander","unstructured":"S. Alexander Haslam . 2001. Psychology in Organizations: The Social Identity Approach . London : Sage, London . S. Alexander Haslam. 2001. Psychology in Organizations: The Social Identity Approach. London: Sage, London."},{"key":"e_1_2_1_75_1","volume-title":"Psychology of Programming","author":"Hoc J.-M.","unstructured":"J.-M. Hoc . 2014. Psychology of Programming . Academic Press . J.-M. Hoc. 2014. Psychology of Programming. Academic Press."},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/775152.775174"},{"key":"e_1_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.14722\/eurousec.2017.23015"},{"key":"e_1_2_1_79_1","volume-title":"The Principles of Psychology","author":"James William","year":"2007","unstructured":"William James . 2007. The Principles of Psychology . Vol. 1 . Cosimo, Inc. , 2007 . William James. 2007. The Principles of Psychology. Vol. 1. Cosimo, Inc., 2007."},{"key":"e_1_2_1_80_1","volume-title":"The Social Cure: Identity, Health and Well-being","author":"Jetten Jolanda","unstructured":"Jolanda Jetten , Catherine Haslam , and S. Haslam Alexander . 2012. The Social Cure: Identity, Health and Well-being . Psychology Press . Jolanda Jetten, Catherine Haslam, and S. Haslam Alexander. 2012. The Social Cure: Identity, Health and Well-being. Psychology Press."},{"key":"e_1_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1017\/S0140525X00030260"},{"key":"e_1_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1201\/1086\/44797.13.5.20041101\/84907.5"},{"key":"e_1_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2006.60"},{"key":"e_1_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-295X.103.3.582"},{"key":"e_1_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACHI.2009.18"},{"key":"e_1_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1097\/00001888-200405000-00006"},{"key":"e_1_2_1_87_1","volume-title":"Proceedings Workshop on Usable Security. Retrieval https:\/\/discovery.ucl.ac.uk\/id\/eprint\/1424472\/.","author":"Kirlappos Iacovos","unstructured":"Iacovos Kirlappos , Simon Parkin , and M. Angela Sasse . 2014. Learning from \u201cShadow Security\u201d: Why understanding non-compliance provides the basis for effective security . In Proceedings Workshop on Usable Security. Retrieval https:\/\/discovery.ucl.ac.uk\/id\/eprint\/1424472\/. Iacovos Kirlappos, Simon Parkin, and M. Angela Sasse. 2014. Learning from \u201cShadow Security\u201d: Why understanding non-compliance provides the basis for effective security. In Proceedings Workshop on Usable Security. Retrieval https:\/\/discovery.ucl.ac.uk\/id\/eprint\/1424472\/."},{"key":"e_1_2_1_88_1","unstructured":"Barbara Kitchenham and Stuart Charters. 2007. Guidelines for performing systematic literature reviews in software engineering. Citeseer. Retrieval info https:\/\/citeseerx.ist.psu.edu\/viewdoc\/download?doi=10.1.1.117.471&rep=rep1&type=pdf.  Barbara Kitchenham and Stuart Charters. 2007. Guidelines for performing systematic literature reviews in software engineering. Citeseer. Retrieval info https:\/\/citeseerx.ist.psu.edu\/viewdoc\/download?doi=10.1.1.117.471&rep=rep1&type=pdf."},{"key":"e_1_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.15439\/2016F263"},{"key":"e_1_2_1_90_1","first-page":"239","article-title":"Mind the gap: Why do people act environmentally and what are the barriers to pro-environmental behavior?Environ","volume":"8","author":"Kollmuss Anja","year":"2002","unstructured":"Anja Kollmuss and Julian Agyeman . 2002 . Mind the gap: Why do people act environmentally and what are the barriers to pro-environmental behavior?Environ . Educ. Res. 8 , 3 (2002), 239 \u2013 260 . Anja Kollmuss and Julian Agyeman. 2002. Mind the gap: Why do people act environmentally and what are the barriers to pro-environmental behavior?Environ. Educ. Res. 8, 3 (2002), 239\u2013260.","journal-title":"Educ. Res."},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.5555\/3155562.3155681"},{"key":"e_1_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9521-5"},{"key":"e_1_2_1_93_1","volume-title":"Christal","author":"Kyllonen Patrick C.","year":"1990","unstructured":"Patrick C. Kyllonen and Raymond E . Christal . 1990 . Reasoning ability is (little more than) working-memory capacity?!Intelligence 14, 4 (1990), 389\u2013433. Patrick C. Kyllonen and Raymond E. Christal. 1990. Reasoning ability is (little more than) working-memory capacity?!Intelligence 14, 4 (1990), 389\u2013433."},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.04.084"},{"key":"e_1_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0164-1212(00)00009-1"},{"key":"e_1_2_1_96_1","volume-title":"IEEE International Conference on Information Theory and Information Security (ICITIS). IEEE, 521\u2013524","author":"Li Peng","year":"2010","unstructured":"Peng Li and Baojiang Cui . 2010 . A comparative study on software vulnerability static analysis techniques and tools . In IEEE International Conference on Information Theory and Information Security (ICITIS). IEEE, 521\u2013524 . Peng Li and Baojiang Cui. 2010. A comparative study on software vulnerability static analysis techniques and tools. In IEEE International Conference on Information Theory and Information Security (ICITIS). IEEE, 521\u2013524."},{"key":"e_1_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1037\/a0014397"},{"key":"e_1_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-016-0560-y"},{"key":"e_1_2_1_99_1"},{"key":"e_1_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/3194707.3194713"},{"key":"e_1_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44208-1_21"},{"key":"e_1_2_1_102_1","doi-asserted-by":"publisher","DOI":"10.1145\/1868328.1868356"},{"key":"e_1_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.5555\/1121680"},{"key":"e_1_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1037\/a0014104"},{"key":"e_1_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.1186\/1748-5908-6-42"},{"key":"e_1_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884790"},{"key":"e_1_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376791"},{"key":"e_1_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300370"},{"key":"e_1_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134082"},{"key":"e_1_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315311"},{"key":"e_1_2_1_111_1","volume-title":"Preventing violence through changing social norms. Oxford Textbook of Violence Prevention: Epidemiology, Evidence and Policy","author":"Neville Fergus G.","unstructured":"Fergus G. Neville . 2015. Preventing violence through changing social norms. Oxford Textbook of Violence Prevention: Epidemiology, Evidence and Policy , P. Donnelly and C. Ward (Eds.) Oxford University Press , 239\u2013244. Fergus G. Neville. 2015. Preventing violence through changing social norms. Oxford Textbook of Violence Prevention: Epidemiology, Evidence and Policy, P. Donnelly and C. Ward (Eds.) Oxford University Press, 239\u2013244."},{"key":"e_1_2_1_112_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133977"},{"key":"e_1_2_1_113_1","doi-asserted-by":"publisher","DOI":"10.1348\/014466609X449395"},{"key":"e_1_2_1_114_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-295X.88.1.1"},{"key":"e_1_2_1_115_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664254"},{"key":"e_1_2_1_116_1","doi-asserted-by":"publisher","DOI":"10.5555\/3291228.3291253"},{"key":"e_1_2_1_117_1","volume-title":"January","author":"OWASP.","year":"2020","unstructured":"OWASP. (Accessed on : January , 2020 ). Source Code Analysis Tools | OWASP. Retrieved from https:\/\/owasp.org\/www-community\/Source_Code_Analysis_Tools. OWASP. (Accessed on: January, 2020). Source Code Analysis Tools | OWASP. Retrieved from https:\/\/owasp.org\/www-community\/Source_Code_Analysis_Tools."},{"key":"e_1_2_1_118_1","unstructured":"OWASP Foundation. 2020. The Open Source Foundation for Application Security. Retrieved from https:\/\/owasp.org\/.  OWASP Foundation. 2020. The Open Source Foundation for Application Security. Retrieved from https:\/\/owasp.org\/."},{"key":"e_1_2_1_119_1","unstructured":"OWASP Secure Coding Practices - Quick Reference Guide. 2020. Retrieved January 2020 from https:\/\/www.owasp.org\/index.php\/ OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide.  OWASP Secure Coding Practices - Quick Reference Guide. 2020. Retrieved January 2020 from https:\/\/www.owasp.org\/index.php\/ OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide."},{"key":"e_1_2_1_120_1","volume-title":"The Psychology of Attention","author":"Pashler Harold E.","unstructured":"Harold E. Pashler . 1999. The Psychology of Attention . The MIT Press . Harold E. Pashler. 1999. The Psychology of Attention. The MIT Press."},{"key":"e_1_2_1_121_1","doi-asserted-by":"publisher","DOI":"10.1145\/249170.249191"},{"key":"e_1_2_1_122_1","doi-asserted-by":"publisher","DOI":"10.1177\/0146167218756033"},{"key":"e_1_2_1_123_1","doi-asserted-by":"publisher","DOI":"10.1515\/jhsem-2014-0035"},{"key":"e_1_2_1_124_1","doi-asserted-by":"publisher","DOI":"10.1145\/3171533.3171539"},{"key":"e_1_2_1_125_1","volume-title":"Software Security Knowledge Area Issue 1.0.","author":"Piessens Frank","year":"2019","unstructured":"Frank Piessens . 2019. The Cyber Security Body of Knowledge , Software Security Knowledge Area Issue 1.0. ( 2019 ). Retrieval Info : https:\/\/www.cybok.org\/media\/downloads\/cybok_version_1.0.pdf. Frank Piessens. 2019. The Cyber Security Body of Knowledge, Software Security Knowledge Area Issue 1.0. (2019). Retrieval Info: https:\/\/www.cybok.org\/media\/downloads\/cybok_version_1.0.pdf."},{"key":"e_1_2_1_126_1","doi-asserted-by":"publisher","DOI":"10.1145\/2851581.2892392"},{"key":"e_1_2_1_127_1","doi-asserted-by":"publisher","DOI":"10.1145\/2998181.2998191"},{"key":"e_1_2_1_128_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.05.001"},{"key":"e_1_2_1_129_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387940.3392230"},{"key":"e_1_2_1_130_1","doi-asserted-by":"publisher","DOI":"10.4135\/9781446200889.n4"},{"key":"e_1_2_1_131_1","volume-title":"Aiken","author":"Reid Allecia E.","year":"2010","unstructured":"Allecia E. Reid , Robert B. Cialdini , and Leona S . Aiken . 2010 . Social norms and health behavior. In Handbook of Behavioral Medicine. Springer , New York, NY. Allecia E. Reid, Robert B. Cialdini, and Leona S. Aiken. 2010. Social norms and health behavior. In Handbook of Behavioral Medicine. Springer, New York, NY."},{"key":"e_1_2_1_132_1","doi-asserted-by":"publisher","DOI":"10.1145\/1970378.1970382"},{"key":"e_1_2_1_133_1","doi-asserted-by":"publisher","DOI":"10.3758\/MC.37.3.336"},{"key":"e_1_2_1_134_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337254"},{"key":"e_1_2_1_135_1","doi-asserted-by":"publisher","DOI":"10.1145\/1516533.1516538"},{"key":"e_1_2_1_136_1","volume-title":"Secure Coding Intention via Protection Motivation Theory Based Survey","author":"Sallinen Tommi","unstructured":"Tommi Sallinen . 2020. Secure Coding Intention via Protection Motivation Theory Based Survey . University of Oulu . Retrieval https:\/\/core.ac.uk\/download\/pdf\/344910619.pdf. Tommi Sallinen. 2020. Secure Coding Intention via Protection Motivation Theory Based Survey. University of Oulu. Retrieval https:\/\/core.ac.uk\/download\/pdf\/344910619.pdf."},{"key":"e_1_2_1_137_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_2_1_138_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2015.12.021"},{"key":"e_1_2_1_139_1","volume-title":"Software Security Knowledge Area Issue 1.0.","author":"Angela Sasse M.","year":"2019","unstructured":"M. Angela Sasse and Awais Rashid . 2019. Human Factors Knowledge Area , Software Security Knowledge Area Issue 1.0. ( 2019 ). Retrieval https:\/\/www.cybok.org\/media\/downloads\/Human_Factors_issue_1.0.pdf. M. Angela Sasse and Awais Rashid. 2019. Human Factors Knowledge Area, Software Security Knowledge Area Issue 1.0. (2019). Retrieval https:\/\/www.cybok.org\/media\/downloads\/Human_Factors_issue_1.0.pdf."},{"key":"e_1_2_1_140_1","doi-asserted-by":"publisher","DOI":"10.5555\/500831"},{"key":"e_1_2_1_141_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-2909.134.2.207"},{"key":"e_1_2_1_142_1","doi-asserted-by":"publisher","DOI":"10.1111\/spc3.12265"},{"key":"e_1_2_1_143_1","doi-asserted-by":"publisher","DOI":"10.1111\/0272-4332.205064"},{"key":"e_1_2_1_144_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337366"},{"key":"e_1_2_1_145_1","doi-asserted-by":"publisher","DOI":"10.1068\/p281059"},{"key":"e_1_2_1_146_1","volume-title":"Semin","author":"Smith Eliot R.","year":"2004","unstructured":"Eliot R. Smith and G\u00fcn R . Semin . 2004 . Socially situated cognition: Cognition in its social context. Retrieval https:\/\/psycnet.apa.org\/record\/2005-01913-002. Eliot R. Smith and G\u00fcn R. Semin. 2004. Socially situated cognition: Cognition in its social context. Retrieval https:\/\/psycnet.apa.org\/record\/2005-01913-002."},{"key":"e_1_2_1_147_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786812"},{"key":"e_1_2_1_148_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2810116"},{"key":"e_1_2_1_149_1","doi-asserted-by":"publisher","DOI":"10.1348\/014466607X269748"},{"key":"e_1_2_1_150_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1751-9004.2008.00161.x"},{"key":"e_1_2_1_151_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1978997"},{"key":"e_1_2_1_152_1","volume-title":"n.d. Retrieved","author":"Analysis Source Code","year":"2020","unstructured":"Source Code Analysis Tools - OWASP. n.d. Retrieved January , 2020 from https:\/\/www.owasp.org\/index.php\/Source_Code_Analysis_Tools. Source Code Analysis Tools - OWASP. n.d. Retrieved January, 2020 from https:\/\/www.owasp.org\/index.php\/Source_Code_Analysis_Tools."},{"key":"e_1_2_1_153_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00021"},{"key":"e_1_2_1_154_1","doi-asserted-by":"publisher","DOI":"10.1006\/jevp.1999.0121"},{"key":"e_1_2_1_155_1","doi-asserted-by":"publisher","DOI":"10.1145\/1352322.1352246"},{"key":"e_1_2_1_156_1","doi-asserted-by":"publisher","DOI":"10.1177\/1098214005283748"},{"key":"e_1_2_1_157_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3173836"},{"key":"e_1_2_1_158_1","unstructured":"J. N. Towse M. Levine M. Petre A. Bandara T. Lopez A. Rashid I. Rauf H. Sharp T. Tun D. van der Linden and B. Nuseibeh. 2020. The case for understanding secure coding as a psychological enterprise. (2020). Manuscript submitted for publication.  J. N. Towse M. Levine M. Petre A. Bandara T. Lopez A. Rashid I. Rauf H. Sharp T. Tun D. van der Linden and B. Nuseibeh. 2020. The case for understanding secure coding as a psychological enterprise. (2020). Manuscript submitted for publication."},{"key":"e_1_2_1_159_1","doi-asserted-by":"publisher","DOI":"10.1111\/1467-8721.ep10770899"},{"key":"e_1_2_1_160_1","doi-asserted-by":"publisher","DOI":"10.1145\/3194133.3194155"},{"key":"e_1_2_1_161_1","volume-title":"Wetherell","author":"Turner John C.","year":"1987","unstructured":"John C. Turner , Michael A. Hogg , Penelope J. Oakes , Stephen D. Reicher , and Margaret S . Wetherell . 1987 . Rediscovering the Social Group : A Self-categorization Theory.Basil Blackwell . John C. Turner, Michael A. Hogg, Penelope J. Oakes, Stephen D. Reicher, and Margaret S. Wetherell. 1987. Rediscovering the Social Group: A Self-categorization Theory.Basil Blackwell."},{"key":"e_1_2_1_162_1","doi-asserted-by":"publisher","DOI":"10.1177\/0146167294205002"},{"key":"e_1_2_1_163_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tics.2018.01.004"},{"key":"e_1_2_1_164_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380394"},{"key":"e_1_2_1_165_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2020.2981317"},{"key":"e_1_2_1_166_1","doi-asserted-by":"publisher","DOI":"10.5555\/998675.999421"},{"key":"e_1_2_1_167_1","doi-asserted-by":"publisher","DOI":"10.5555\/302163.302169"},{"key":"e_1_2_1_168_1","doi-asserted-by":"publisher","DOI":"10.1111\/nyas.14304"},{"key":"e_1_2_1_169_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/bxm064"},{"key":"e_1_2_1_170_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2774"},{"key":"e_1_2_1_171_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP.2019.00013"},{"key":"e_1_2_1_172_1","volume-title":"2nd Workshop on Security Information Workers, WSIW@SOUPS 2016","author":"Weir Charles","year":"2016","unstructured":"Charles Weir , Awais Rashid , and James Noble . 2016 . How to Improve the Security Skills of Mobile App Developers: Comparing and Contrasting Expert Views . In 2nd Workshop on Security Information Workers, WSIW@SOUPS 2016 , Denver, CO, USA , June 22, 2016. https:\/\/www.usenix.org\/conference\/soups2016\/workshop-program\/wsiw16\/presentation\/weir. Charles Weir, Awais Rashid, and James Noble. 2016. How to Improve the Security Skills of Mobile App Developers: Comparing and Contrasting Expert Views. In 2nd Workshop on Security Information Workers, WSIW@SOUPS 2016, Denver, CO, USA, June 22, 2016. https:\/\/www.usenix.org\/conference\/soups2016\/workshop-program\/wsiw16\/presentation\/weir."},{"key":"e_1_2_1_173_1","doi-asserted-by":"crossref","unstructured":"Charles Weir Awais Rashid and James Noble. 2017. I'd like to have an argument please: Using dialectic for effective app security In EuroUSEC 2017 Internet Society. Retrieval https:\/\/research-information.bris.ac.uk\/en\/publications\/id-like-to-have-an-argument-please-using-dialectic-for-effective.  Charles Weir Awais Rashid and James Noble. 2017. I'd like to have an argument please: Using dialectic for effective app security In EuroUSEC 2017 Internet Society. Retrieval https:\/\/research-information.bris.ac.uk\/en\/publications\/id-like-to-have-an-argument-please-using-dialectic-for-effective.","DOI":"10.14722\/eurousec.2017.23002"},{"key":"e_1_2_1_174_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2009.03.002"},{"key":"e_1_2_1_175_1","doi-asserted-by":"publisher","DOI":"10.1145\/2676723.2677280"},{"key":"e_1_2_1_176_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2006.39"},{"key":"e_1_2_1_177_1","volume-title":"Morgan","author":"Williams Craig","year":"2020","unstructured":"Craig Williams , Helen M. Hodgetts , Candice Morey , Bill Macken , Dylan M. Jones , Qiyuan Zhang , and Phillip L . Morgan . 2020 . Human error in information security: Exploring the role of interruptions and multitasking in action slips. In International Conference on Human-computer Interaction. Springer , 622\u2013629. Craig Williams, Helen M. Hodgetts, Candice Morey, Bill Macken, Dylan M. Jones, Qiyuan Zhang, and Phillip L. Morgan. 2020. Human error in information security: Exploring the role of interruptions and multitasking in action slips. In International Conference on Human-computer Interaction. Springer, 622\u2013629."},{"key":"e_1_2_1_178_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663887.2663898"},{"key":"e_1_2_1_179_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786816"},{"key":"e_1_2_1_180_1","doi-asserted-by":"publisher","DOI":"10.1145\/2601248.2601268"},{"key":"e_1_2_1_181_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2013.02.002"},{"key":"e_1_2_1_182_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2006.08.003"},{"key":"e_1_2_1_183_1","doi-asserted-by":"publisher","DOI":"10.1145\/2531602.2531722"},{"key":"e_1_2_1_184_1","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076770"},{"key":"e_1_2_1_185_1","volume-title":"IEEE Symposium on Visual Languages and Human-centric Computing (VL\/HCC). IEEE, 161\u2013164","author":"Xie Jing","year":"2011","unstructured":"Jing Xie , Heather Richter Lipford , and Bill Chu . 2011 . Why do programmers make security errors? In IEEE Symposium on Visual Languages and Human-centric Computing (VL\/HCC). IEEE, 161\u2013164 . Jing Xie, Heather Richter Lipford, and Bill Chu. 2011. Why do programmers make security errors? In IEEE Symposium on Visual Languages and Human-centric Computing (VL\/HCC). IEEE, 161\u2013164."},{"key":"e_1_2_1_186_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2017.8254428"},{"key":"e_1_2_1_187_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-016-1672-0"},{"key":"e_1_2_1_188_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2010.32"}],"container-title":["ACM Transactions on Software Engineering and Methodology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3471930","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3471930","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:24:49Z","timestamp":1750181089000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3471930"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,9,28]]},"references-count":187,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,1,31]]}},"alternative-id":["10.1145\/3471930"],"URL":"https:\/\/doi.org\/10.1145\/3471930","relation":{},"ISSN":["1049-331X","1557-7392"],"issn-type":[{"value":"1049-331X","type":"print"},{"value":"1557-7392","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,9,28]]},"assertion":[{"value":"2020-09-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-09-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}