TeamUSEC

Interviews on Code Secret Leakage

In this study, the CISPA Helmholtz-Center for Information Security examines developers experiences remediating and preventing code secret leakage in cooperation with the Leibniz University Hannover and the George Washington University.

Within this study, we are interested in code secret management approaches that developers apply. This includes, for example, sharing secret in a software team or preventing code secret leakage in open source code repositories like GitHub. Previous work by Krause et al. revealed that about 30% of developers have experienced code secret leakage. We aim to better understand the root causes, challenges that developers face, and overall try to explore approaches for both prevention and remediation of secret leaks. We would love to get your insights in an interview! See here for more information.

If you have any questions or wish to receive further information, please contact us:

Researchers

  • Alexander Krause | Researcher (CISPA) and PhD Student (Leibniz University Hannover).
  • PI Yasemin Acar | Assistant Professor (The George Washington University) and Guest Researcher (Max Planck Institute for Security and Privacy).
  • PI Sascha Fahl | Tenured Faculty (CISPA) and Full Professor (Leibniz University Hannover).

Institutions

CISPA Helmholtz-Center for Information Security
https://www.cispa.de/

Leibniz University Hannover
https://www.uni-hannover.de/en/

George Washington University
https://www.gwu.edu/

Max Planck Institute for Security and Privacy
https://www.mpi-sp.org/