Nowadays, security incidents have become a familiar" nuisance," and they regularly lead to
the exposure of private and sensitive data. The root causes for such incidents are rarely …

In the computer science field coordinated vulnerability disclosure is a well-known practice
for finding flaws in IT-systems and patching them. In this practice, a white-hat hacker who …

Efforts to improve the efficiency of security operation centers (SOCs) have emphasized
building tools for analysts or understanding the human and organizational factors involved …

Keeping machines updated is crucial for maintaining system security. While recent studies
have investigated the software updating practices of end users, system administrators have …

Organizational security teams have begun to specialize, and as a result, the existence of
red, blue, and purple teams have been used as signals for an organization's security …

Despite increasing investment in cybersecurity initiatives, incidents such as data breach,
malware infections, and cyberattacks on cyberphysical systems show an upward trend. I …

Experts agree that keeping systems up to date is a powerful security measure. Previous
work found that users sometimes explicitly refrain from performing timely updates, eg, due to …

Similar to software bugs, configuration errors are also one of the major causes of today's
system failures. Many configuration issues manifest themselves in ways similar to software …

Described by some as the worst vulnerability since e-commerce began on the Internet, one
word sums up what this Basic Training column is all about: Heartbleed. Although we don't …

Secure software development is a challenging task requiring consideration of many possible
threats and mitigations. This paper investigates how and why programmers, despite a …