Papers
“Security in open versus closed systems—the dance of Boltzmann, Coase and Moore”. Technical report, Cambridge University, England, 2002. toulouse.pdf (119.58 KB)
, “A Theory of Disclosure for Security and Competitive Reasons: Open Source, Proprietary Software, and Government Systems”, Hous. L. Rev., vol. 42, p. 1333, 2005. KP21 03 Swire.pdf (294.24 KB)
, “Software security for open-source systems”, IEEE Security & Privacy Magazine, vol. 1, no. 1, pp. 38 - 45, 2003.
, “On the security of open source software”, Information systems journal, vol. 12, pp. 61–78, 2002. Payne2002_ISJ12_SecurityOSS.pdf (111.53 KB)
, “Security of Open Source and Closed Source Software: An Empirical Comparison of Published Vulnerabilities”, AMCIS 2009 Proceedings, p. 387, 2009. Schryen_-_AMCIS_09_-_Security_of_open_source_and_closed_source_software_-_Web_version.pdf (442.07 KB)
, “The Open Source approach—opportunities and limitations with respect to security and privacy”, Computers & Security, vol. 21, pp. 461–471, 2002. HaKP_02OpenSource_0214.doc (2.5 MB)
, “Increased security through open source”, Communications of the ACM, vol. 50, pp. 79–83, 2007. 0801.3924.pdf (95.95 KB)
, “Does open source improve system security?”, IEEE Software, vol. 18, pp. 57–61, 2001. 01579ad1c373ed59a19eba0396f7f0cb7a0e.pdf (121.65 KB)
, “The availability of source code in relation to timely response to security vulnerabilities”, Computers & Security, vol. 22, pp. 707 - 724, 2003.
, “Towards a bayesian approach in modeling the disclosure of unique security faults in open source projects”, in Software Reliability Engineering (ISSRE), 2010 IEEE 21st International Symposium on, 2010, pp. 101–110. 0b13ae1e6317c7e31f6b8783f669b978ffb3.pdf (762.61 KB)
, “Stopping spyware at the gate: a user study of privacy, notice and spyware”, in 2005 Symposium on Usable Privacy and Security, Pittsburgh, PA, 2005, pp. 43-52.
, “Security and Emotion: Sentiment Analysis of Security Discussions on GitHub”, in Proceedings of the 11th Working Conference on Mining Software Repositories, New York, NY, USA, 2014, pp. 348–351. pletea.pdf (250.26 KB)
, “Processes in Securing Open Architecture Software Systems”, in Proceedings of the 2013 International Conference on Software and System Process, New York, NY, USA, 2013, pp. 126–135. Scacchi-Alspaugh-ICSSP13.pdf (1.27 MB)
, “Mining security changes in FreeBSD”, in 2010 7th IEEE Working Conference on Mining Software Repositories (MSR 2010)2010 7th IEEE Working Conference on Mining Software Repositories (MSR 2010), Cape Town, South Africa, 2010, pp. 90 - 93.
, “When Are OSS Developers More Likely to Introduce Vulnerable Code Changes? A Case Study”, in Open Source Software: Mobile Open Source Technologies, vol. 427, Springer Berlin Heidelberg, 2014, pp. 234-236.
, “Open and Closed Systems are Equivalent (that is, in an ideal world)”, in Perspectives on free and open source software, MIT Press, 2005, pp. 127-142. toulousebook.pdf (162.36 KB)
,