An empirical study of security culture in open source software communities

For your marketing

Possible founder application

Create security ownership, norms, communication channels, and governance—not only technical controls.

Reported result

What the study found

Security culture spans attitude, behavior, competency, norms, governance, and communication; social context affects security behavior and decisions.

Research question

What the authors investigated

How does the study’s stated design explain its reported outcome in this setting?

Design

Empirical survey

Sample and setting

OSS community participants; sample size unavailable on abstract page.

Scope and transfer

Limitations to keep in view

Abstract/page evidence limits detailed sample and external-validity assessment.

Research sources

abstract_only