Co-Creation in Secure Software Development: Applied Ethnography and the Interface of Software and Development.
Long-term ethnographic research conducted at a software company examined how security concerns and practices became part of software development. Participant observation over a two-year period was done by researchers with cybersecurity backgrounds and training in both computer science and qualitativ...
| Publicado en: | Human Organization Vol. 82; no. 1; pp. 13 - 25 |
|---|---|
| Autores principales: | , , , |
| Formato: | Artículo |
| Publicado: |
Taylor & Francis Ltd
Spring2023
|
| Materias: | |
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=ssf&AN=163514314&site=ehost-live header: @attributes: shortDbName: ssf uiTerm: 163514314 longDbName: Social Sciences Full Text (H.W. Wilson) uiTag: AN controlInfo: bkinfo: jinfo: jid: 00187259 HUO jtl: Human Organization issn: 00187259 maglogo: N pubinfo: dt: Spring2023 vid: 82 iid: 1 pid: 377 pub: Taylor & Francis Ltd artinfo: ui: 163514314 10.17730/1938-3525-82.1.13 ppf: 13 ppct: 12 formats: tig: atl: Co-Creation in Secure Software Development: Applied Ethnography and the Interface of Software and Development. aug: au: Lende, Daniel Monkhouse, Alexis Ligatti, Jay Xinming Ou affil: Associate Professor in the Department of Anthropology at the University of South Florida (USF) Graduate student in the Department of Anthropology at USF Professor in the Department of Computer Science and Engineering at USF su: Ethnology Computer software development Software engineering Interactive learning Computer science Software engineers sug: subj: Ethnology Research and development in the physical, engineering and life sciences Research and Development in the Physical, Engineering, and Life Sciences (except Biotechnology) Computer systems design and related services (except video game design and development) Custom Computer Programming Services Computer software development Software engineering Interactive learning Computer science Software engineers keyword: business ethnography co-creation cybersecurity learning software development business ethnography co-creation cybersecurity learning software development ab: Long-term ethnographic research conducted at a software company examined how security concerns and practices became part of software development. Participant observation over a two-year period was done by researchers with cybersecurity backgrounds and training in both computer science and qualitative research, with ongoing analysis done by a larger interdisciplinary team. In situ researchers joined as software engineers and participated in daily work activities while observing development practices and analyzing software (in)security. The first year of research found that improving security during software development can be helped by a co-creation model, whereby security experts work directly with software developers to provide security tools applicable to the specific software within the workflow. Researchers-as-developers fostered conversations, concerns, and considerations of how to implement security within the process of development. The second year used a situated learning approach to understand the interface between software development, security, and the development team. Through an interactive learning process, software engineers gathered knowledge and applied it, helping to foster greater concerns for security as part of the overall "culture" of development within the company. This locally situated co-creation approach has resonances with participatory approaches in business anthropology and implications for how to promote the co-creation of knowledge and expertise more broadly. pubtype: Academic Journal doctype: Article src: R language: English refInfo: copyright: @attributes: flag: N holdings: @attributes: islocal: N |
|---|