SECURE PROGRAMMING PRACTICES AND OPEN-SOURCE SYSTEMS

In the era of Open-Source Systems (OSS), security is one of the most important issues that have a direct impact on the reliability of software systems. Security can significantly be affected by the way programmers write their code and their level of proficiency when it comes to secure programming practices. In many problem domains, open-source systems are written by participants with sufficient experience in their fields. However, it is not unusual for some of those participants to have a limited background in secure programming practices. A study that examines the presence, prevalence, and distribution of code vulnerabilities in scientificOpen-Source systems is presented. This empirical investigation statically analyzes three systemsdeveloped in C and C++ languages comprising over three million lines of source code. The study aimed to provide empirical evidence that shows some of the common vulnerabilities that are introduced to the open-source systems during the implementation phase. The findings are meant to be used for designing proper training courses and enhancing the academic computing curriculum. A cloud-based analysis tool developed by a team from the University of Wisconsin is used in this study. The findings confirm the presence and show the distribution of some vulnerabilities in the code introduced by programmers confirming the need for proper relevant training and education.