Developers are Not the Enemy!: The Need for Usable Security APIs

Matthew Green,Matthew Smith

doi:10.1109/msp.2016.111

Developers are Not the Enemy!: The Need for Usable Security APIs

Matthew Green, Matthew Smith

https://doi.org/10.1109/msp.2016.111

Copy DOI

Journal: IEEE Security & Privacy	Publication Date: Sep 1, 2016
Citations: 148

Affiliation: Johns Hopkins University, University of Bonn, Fraunhofer Institute for Communication, Information Processing and Ergonomics

#Security Professionals #Cryptographic APIs + Show 8 more

Abstract
Full-Text PDF
Similar Papers

Abstract

Rather than recognizing software engineers' limitations, modern security practice has created an adversarial relationship between security software designers and the developers who use their software to construct applications. Using the example of cryptographic APIs, the authors show that developers aren't the enemy and that, to strengthen security systems across the board, security professionals must focus on creating developer-friendly and developer-centric approaches.

Full Text