Foundations of Agile Python Development

Younker, Jeff

doi:10.1007/978-1-4302-0635-4

Cited by 7 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• We considered a revision as a Python revision if its root directory contained either __init.py__ or setup.py. Without at least one of these files, the project cannot be used as a Python module [16,18,25] (nor published on PyPI [17]), therefore it is a viable heuristics to detect Python projects. • We considered a revision to be a JavaScript one if its root directory contained either index.js, app.js, server.js as one of these files will most likely be included in the root directory [11] of a JavaScript project.…”

Section: Approachmentioning

confidence: 99%

Exploring the Security Awareness of the Python and JavaScript Open Source Communities

Antal

Keleti

Hegedűs

2020

Proceedings of the 17th International Conference on Mining Software Repositories

View full text Add to dashboard Cite

Software security is undoubtedly a major concern in today's software engineering. Although the level of awareness of security issues is often high, practical experiences show that neither preventive actions nor reactions to possible issues are always addressed properly in reality. By analyzing large quantities of commits in the opensource communities, we can categorize the vulnerabilities mitigated by the developers and study their distribution, resolution time, etc. to learn and improve security management processes and practices.With the help of the Software Heritage Graph Dataset, we investigated the commits of two of the most popular script languages -Python and JavaScript -projects collected from public repositories and identified those that mitigate a certain vulnerability in the code (i.e. vulnerability resolution commits). On the one hand, we identified the types of vulnerabilities (in terms of CWE groups) referred to in commit messages and compared their numbers within the two communities. On the other hand, we examined the average time elapsing between the publish date of a vulnerability and the first reference to it in a commit.We found that there is a large intersection in the vulnerability types mitigated by the two communities, but most prevalent vulnerabilities are specific to language. Moreover, neither the JavaScript nor the Python community reacts very fast to appearing security vulnerabilities in general with only a couple of exceptions for certain CWE groups.

show abstract

Section: Approachmentioning

confidence: 99%

Exploring the Security Awareness of the Python and JavaScript Open Source Communities

Antal

Keleti

Hegedűs

2020

Proceedings of the 17th International Conference on Mining Software Repositories

View full text Add to dashboard Cite

show abstract

Section: Chapter 5 Studying Typical Security Issues and Their Mitigat...mentioning

confidence: 99%

Applying Code Analysis and Machine Learning Techniques to Improve Compatibility and Security of Programs

Antal

View full text Add to dashboard Cite

If you can't fly then run, if you can't run then walk, if you can't walk then crawl, but whatever you do you have to keep moving forward." -Martin Luther King Jr.Preface I clearly remember the first time I used a computer. I can say that it changed my life. Soon after, we bought our first PC and my journey started. My first projects were quite small, like a timetable generator for my classmates, as we took a variety of language and elective classes. My first real project was a management system for an association of junior firefighters; I was 16 years old at that time. As soon as I received the requirements, I started to work on the system as I was very enthusiastic. When I thought I finished the project, the software went live. Soon I got several bug reports, and other feature requests. Of course, my code was a complete mess; it was full of code duplications and security holes (an authorized user accidentally "hacked" it once). Aside from the reported bugs, I discovered several bugs myself that I had to fix (everywhere). Enhancing the software was almost as big of a challenge as writing it from scratch. This was the time I realized that not only are the functional requirements important, the quality and the security of the software are also crucial. I have been working to advance this principle through my doctoral studies ever since. I hope my work in this field helps developers in building better software.Although the thesis emphasizes the author's contribution, none of the presented research works would have been possible without the help of others. First and foremost, I would like to thank my supervisor, Dr. Rudolf Ferenc, for his guidance and his useful advice that helped me throughout my studies. His positive and calm attitude helped me a lot; without him, I would have probably never done any scientific research. My special thanks go to Dr. Péter Hegedűs, whom I consider my second mentor. He taught me a lot of indispensable things about research, and helped me many times over the years. My sincere thanks go to Dr. Tibor Gyimóthy, the former head of the Department of Software Engineering, for supporting my research work. I would like to express my gratitude to Dr. Csaba Nagy and Dr. Gábor Szőke with whom I started my scientific journey. My many thanks go to my colleagues and article co-authors, namely Dr.

show abstract

A Scala and Python Refresher

Koitzsch

2016

Pro Hadoop Data Analytics

View full text Add to dashboard Cite

Foundations of Agile Python Development

Cited by 7 publications

References 0 publications

Exploring the Security Awareness of the Python and JavaScript Open Source Communities

Exploring the Security Awareness of the Python and JavaScript Open Source Communities

Applying Code Analysis and Machine Learning Techniques to Improve Compatibility and Security of Programs

A Scala and Python Refresher

Contact Info

Product

Resources

About