Developer experience · Systematic literature review with thematic analysis and paper-ancestry tracing; inter-coder agreement was reported.
SLR: From Saltzer and Schroeder to 2021…47 Years of Research on the Development and Validation of Security API Recommendations
Peer-reviewed research · 2023
Summary
Recommendations cluster into seven core ways to improve usability; very few are empirically validated, and usable-security API recommendations lag further behind.
For your marketing
Possible founder application
Require usability validation—not just security review—for auth/crypto APIs; prioritize documentation, requirements and organizational practices alongside API structure.
Reported result
What the study found
Recommendations cluster into seven core ways to improve usability; very few are empirically validated, and usable-security API recommendations lag further behind.
Research question
What the authors investigated
What recommendations exist for improving security-API usability, and how well are they validated?
Design
Systematic literature review with thematic analysis and paper-ancestry tracing; inter-coder agreement was reported.
Sample and setting
65 papers containing 883 recommendations about programmer-facing security/cryptographic APIs.
Scope and transfer
Limitations to keep in view
Search may have missed relevant papers; the review explicitly reports threats involving coverage, coding and interpretation.
Research sources
Authoritative publisher/repository page fetched in this run; abstract, bibliographic metadata, methods/results and limitations on the cited page support this synthesis (https://dl.acm.org/doi/full/10.1145/3561383). Firecrawl research job 01a14366-d263-71d0-bc44-b95482987b7b returned this citation and metadata.