Skip to content
NewA calmer, faster ZeroHour
Researchinfo

Security Is More Than a Library Call: How Security Features Live in Code

arXiv cs.CRby Kevin Hermann ()1 min read1
Read at arxiv.org
AI summary · grok-4.7Summaries by Vani AI

A Java mining study finds 561 security features are large, scattered, and tangled beyond library calls.

Researchers manually inspected 2,127,761 lines across 19,121 files in nine large open-source Java systems. They annotated 183,395 lines implementing 561 instances of 54 taxonomy security features, including access control and cryptography. Features can be large, scatter across a codebase, and tangle with one another. External security libraries are common, but integrating them still requires substantial custom code.

Key facts
  • Study covers nine popular large Java systems and over two million lines.
  • 561 feature instances map to 54 security-feature types.
  • Access control and similar features scatter and tangle across the codebase.
  • Library use still needs large amounts of integration code.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
javasecurity-featuresaccess-controlcryptographysoftware-securitycode-miningopen-source
Products
Java

From the original article

1 min read at arxiv.org

Implementing security features---functionalities that protect sensitive data or prevent malicious actions by attackers---is important for ensuring the security and integrity of software systems.

arXiv cs.CR

By Kevin Hermann · arxiv.org

Read the full article at arXiv cs.CR

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.