To shed light on how security tools

To shed light on how security tools support developers in diagnosing potential vulnerabilities, Murphy-Hill's team and collaborators from the University of North Carolina at Charlotte devised a separate study, effectively asking: do tools give developers the information they need to determine if there's a real problem and how to fix it?

In this study, the researchers gave 10 developers of varying backgrounds a specific security tool and a substantial chunk of open-source code to examine. The code contained known security vulnerabilities, which were identified by the security tool. Each of the study participants was asked to use the tool, inspect the source code, and say whether each security notification from the tool was real and how they would address the vulnerabilities.

Результаты (английский) 2:

To shed light on how security tools support developers in diagnosing potential vulnerabilities, Murphy-Hill's team and collaborators from the University of North Carolina at Charlotte devised a separate study, effectively asking: do tools give developers the information they need to determine if there's a real and how to problem fix it? In this study, the researchers gave 10 developers of varying backgrounds a specific security tool and a substantial chunk of open-source code to examine. The code contained known security vulnerabilities, which were identified by the security tool. Each of the study participants was asked to use the tool, inspect the source code, and say whether each security notification from the tool was real and how they would address the vulnerabilities.

Результаты (английский) 3:

to shed light on how security tools to support developers in diagnosing potential vulnerabilities, murphy - hill's team and collaborators from the university of north carolina at charlotte devised a separate study, effectively asking: do tools give developers the information they need to determine if there's a real problem and how to fix it?

in this study.the researchers gave 10 developers of varying backgrounds a specific security tool and a chunk of their open source code to examine. the code contained in the security vulnerabilities, which were identified by the security tool. each of the study participants were asked to use the tool, inspect the source code.and say whether each security notification from the tool was real and how they would address the vulnerabilities.