Modern code reviews—survey of literature and practice

D Badampudi, M Unterkalmsteiner… - ACM Transactions on …, 2023‏ - dl.acm.org
Background: Modern Code Review (MCR) is a lightweight alternative to traditional code
inspections. While secondary studies on MCR exist, it is ua nknown whether the research …

A systematic literature review and taxonomy of modern code review

N Davila, I Nunes - Journal of Systems and Software, 2021‏ - Elsevier
Abstract Context: Modern Code Review (MCR) is a widely known practice of software quality
assurance. However, the existing body of knowledge of MCR is currently not understood as …

Vccfinder: Finding potential vulnerabilities in open-source projects to assist code audits

H Perl, S Dechand, M Smith, D Arp… - Proceedings of the …, 2015‏ - dl.acm.org
Despite the security community's best effort, the number of serious vulnerabilities discovered
in software is increasing rapidly. In theory, security audits should find and remove the …

Semfuzz: Semantics-based automatic generation of proof-of-concept exploits

W You, P Zong, K Chen, XF Wang, X Liao… - Proceedings of the …, 2017‏ - dl.acm.org
Patches and related information about software vulnerabilities are often made available to
the public, aiming to facilitate timely fixes. Unfortunately, the slow paces of system updates …

Revisiting code ownership and its relationship with software quality in the scope of modern code review

P Thongtanunam, S McIntosh, AE Hassan… - Proceedings of the 38th …, 2016‏ - dl.acm.org
Code ownership establishes a chain of responsibility for modules in large software systems.
Although prior work uncovers a link between code ownership heuristics and software …

Modern release engineering in a nutshell--why researchers should care

B Adams, S McIntosh - 2016 IEEE 23rd international …, 2016‏ - ieeexplore.ieee.org
The release engineering process is the process that brings high quality code changes from
a developer's workspace to the end user, encompassing code change integration …

Understanding security mistakes developers make: Qualitative analysis from build it, break it, fix it

D Votipka, KR Fulton, J Parker, M Hou… - 29th USENIX Security …, 2020‏ - usenix.org
Secure software development is a challenging task requiring consideration of many possible
threats and mitigations. This paper investigates how and why programmers, despite a …

A survey on energy-aware security mechanisms for the internet of things

P He, Y Zhou, X Qin - Future Internet, 2024‏ - mdpi.com
The Internet of Things (IoT) employs sensors and the Internet for information exchange,
enabling intelligent identification, monitoring, and management, which has deeply impacted …

VulinOSS: a dataset of security vulnerabilities in open-source systems

A Gkortzis, D Mitropoulos, D Spinellis - Proceedings of the 15th …, 2018‏ - dl.acm.org
Examining the different characteristics of open-source software in relation to security
vulnerabilities, can provide the research community with findings that can lead to the …

Investigating code review practices in defective files: An empirical study of the qt system

P Thongtanunam, S McIntosh… - 2015 ieee/acm 12th …, 2015‏ - ieeexplore.ieee.org
Software code review is a well-established software quality practice. Recently, Modern Code
Review (MCR) has been widely adopted in both open source and proprietary projects. To …