Cha ac e izing he Secu i y Cul u e o he RSE Communi y
Ma hew A ms ong1, Je ey Ca e 1, Reed Milewicz2
1Uni e si y o Alabama, 2Sandia Na ional Labo a o y
RSE Resul s Ideas o Imp o emen
•Adop a communi y- esponsibili y mindse , simila
o OSS
•Beha io s
•Policies
•P ocedu es
•Iden i y and P omo e In e ac ions be ween
s akeholde s
•Secu i y Resea che s
•So wa e Enginee ing Resea che s
•Resea ch Funde s
•Resea ch So wa e Enginee s
•Domain Expe s and PIs
•Ongoing:
•P omo e RSE secu i y awa eness, leading o
secu i y champions
•Secu i y Wo kshops o RSEs
•P omo e RSE cause wi h ex e nal esea che s
•Publish indings in wide SE / secu i y
enues
•Ha e hough s ha could explain ou indings?
•Wha do you hink he RSE communi y should be
doing o imp o e?
•Wha could ex e nal s akeholde s do o help?
•Ha e an idea o ou nex s ep ha would bes help
you?
Any w i ing o a ached eedback o his pos e will be used in on-going esea ch, as app o ed by he Uni e si y o Alabama IRB. By w i ing o a aching eedback, you
consen o ou use o he eedback in ou s udy. I you ha e any ques ions, please con ac Ma hew A ms ong (maa ms[email p o ec ed]) o mo e in o ma ion.
Value
Responsibili y*
Posi i i y*
Ac s*
Compliance
Risk-Taking
Knowledge
Skills
E ec i eness
T us *
Suppo i eness
Expec a ion
Expe ise
Policies
Implemen a ion
In as uc u e
Codi ica ion
Pe sonaliza ion
Mean Values
RSE
OSS
Lea e us a no e!
RSE s Open-Sou ce Secu i y
Cul u e
HELP WANTED
RSE dimension esul s in ascending o de , indica ing:
•A lack o ins i u ional suppo and communica ion
me hods o secu i y
•Posi i e beha io s despi e mixed skills/expe ise
•Posi i e a i udes despi e neu al communi y
expec a ions and suppo
*Indica es an insigni ican di e ence unde analysis
Despi e simila a i udes owa ds secu i y, OS is mo e
posi i e in almos all o he dimensions; pe haps echniques
could be ansla ed om OS o RS?
In e iews also a ailable
Con ac maa ms [email p o ec ed] o mo e in o
