.png){kind=icon}
返回
Fixing vulnerabilities potentially hinders maintainability
.png){kind=icon}
PRE
AI
DOI：10.1007/s10664-021-10019-z.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Security is a requirement of utmost importance to produce high-quality software. However, there is still a considerable amount of vulnerabilities being discovered and fixed almost weekly. We hypothesize that developers affect the maintainability of their codebases when patching vulnerabilities. This paper evaluates the impact of patches to improve security on the maintainability of open-source software. Maintainability is measured based on the Better Code Hub's model of 10 guidelines on a dataset, including 1300 security-related commits. Results show evidence of a trade-off between security and maintainability for 41.90% of the cases, i.e., developers may hinder software maintainability. Our analysis shows that 38.29% of patches increased software complexity and 37.87% of patches increased the percentage of LOCs per unit. The implications of our study are that changes to codebases while patching vulnerabilities need to be performed with extra care; tools for patch risk assessment should be integrate into the CI/CD pipeline; computer science curricula needs to be updated; and, more secure programming languages are necessary.
Keyword:
Software security
Software maintenance
Open-source software
期刊
IF:
3.6
论文数:
2.0K
被引数:
5.3K
机构
引用论文
Emotional, physical, and social needs among 0–5‐year‐old children displaced by the 2010 Chilean earthquake: associated characteristics and exposures.png)
Disasters
DisastersIF0
PREAI
分享收藏Time‐dependent enhancement of hippocampus‐dependent memory after treatment with memantine: Implications for enhanced hippocampal adult neurogenesisHippocampus
HippocampusIF0
PREAI
分享收藏
Electrochemical Impedance Spectroscopy and Determination of the Internal Resistance as a Way to Estimate Lead-Acid Batteries ConditionBatteries
OAAI
BatteriesIF0
OAAI分享收藏
查看更多内容