Trust challenges in reusing open source software: an interview-based initial study
Trust challenges in reusing open source software: an interview-based initial study
Open source projects play a significant role in software production. Most of the software projects reuse and build upon the existing open source projects and libraries. While reusing is a time and cost-saving strategy, some of the key factors are often neglected that create vulnerability in the software system. We look beyond the static code analysis and dependency chain tracing to prevent vulnerabilities at the human factors level. The literature lacks a comprehensive study of the human factors perspective on the issue of trust in reusing open source projects. We performed an interview-based initial study with software developers to get an understanding of the trust issue and limitations among the practitioners. We outline some of the key trust issues in this paper and lay out the first steps toward the trustworthy reuse of software.
cs.SE
Ghofrani, Javad
533baa0d-11b8-464f-8023-a686bea1e431
Heravi, Paria
2533c769-9871-4fcc-bace-7941ede8b169
Babaei, Kambiz A.
b3cbfe3f-c390-4de9-b718-78f2db4a9e28
Soorati, Mohammad
35fe6bbb-ce52-4c21-a46e-9bb0e31d246c
1 August 2022
Ghofrani, Javad
533baa0d-11b8-464f-8023-a686bea1e431
Heravi, Paria
2533c769-9871-4fcc-bace-7941ede8b169
Babaei, Kambiz A.
b3cbfe3f-c390-4de9-b718-78f2db4a9e28
Soorati, Mohammad
35fe6bbb-ce52-4c21-a46e-9bb0e31d246c
[Unknown type: UNSPECIFIED]
Abstract
Open source projects play a significant role in software production. Most of the software projects reuse and build upon the existing open source projects and libraries. While reusing is a time and cost-saving strategy, some of the key factors are often neglected that create vulnerability in the software system. We look beyond the static code analysis and dependency chain tracing to prevent vulnerabilities at the human factors level. The literature lacks a comprehensive study of the human factors perspective on the issue of trust in reusing open source projects. We performed an interview-based initial study with software developers to get an understanding of the trust issue and limitations among the practitioners. We outline some of the key trust issues in this paper and lay out the first steps toward the trustworthy reuse of software.
Text
2208.01137v1
- Author's Original
More information
Published date: 1 August 2022
Additional Information:
To appear in Proceedings of 26th ACM International Systems and Software Product Line Conference - Volume B
Keywords:
cs.SE
Identifiers
Local EPrints ID: 472596
URI: http://eprints.soton.ac.uk/id/eprint/472596
PURE UUID: 4e98f57c-9e72-4b3f-8365-f902d4e94390
Catalogue record
Date deposited: 09 Dec 2022 17:39
Last modified: 17 Mar 2024 03:57
Export record
Altmetrics
Contributors
Author:
Javad Ghofrani
Author:
Paria Heravi
Author:
Kambiz A. Babaei
Author:
Mohammad Soorati
Download statistics
Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.
View more statistics