Developing secure software requires the integration of numerous methods and tools into the development process, and software design is based on shared expert knowledge, claims, and opinions. Empirical methods, including data analytics, allow extracting knowledge and insights from the data that organizations collect from their processes and tools, and from the opinions of the experts who practice these processes and methods. This book introduces the reader to the fundamentals of empirical research methods, and demonstrates how these methods can be used to hone a secure software development lifecycle based on empirical data and published best practices.
1. Empirical Research on Security and Privacy by Design. 2. Guidelines for Systematic Mapping Studies in Security Engineering. 3. An Introduction to Data Analytics for Software Security. 4. Generating Software Security Knowledge Through Empirical Methods . 5. Visual Analytics: Foundations and Experiences in Malware Analysis. 6. Analysis of Metrics for Classification Accuracy in Intrusion Detection. 7. The Building Security in Maturity Model as a Research Tool. 8. Agile Test Automation for Web Applications: A Security Perspective
Sandra Domenique Ringmann and Hanno Langweg. 9. Benchmark for Empirical Evaluation of Web Application Anomaly Detectors. 10. Threats to Validity in Empirical Software Security Research.