Главная
Study mode:
on
1
Intro
2
Developers fail
3
You best people fail
4
API design for usability
5
Python
6
Libraries
7
Study Tasks
8
Study Environment
9
Questionnaires
10
Results
11
Functionality Results
12
Security Results
13
Security
14
Summary
Description:
Explore a comprehensive analysis of cryptographic API usability in this 21-minute IEEE conference talk. Delve into the findings of a controlled experiment involving 256 Python developers from GitHub, who tackled common symmetric and asymmetric cryptography tasks using five different APIs. Discover how API design impacts code security and functionality, and learn why simplicity alone is insufficient for creating effective cryptographic libraries. Examine the crucial roles of documentation, code examples, and auxiliary features in promoting secure development practices. Gain insights into the surprising compensatory effects of comprehensive documentation on complex APIs, and understand the concerning disconnect between developers' perceptions of code security and actual security outcomes. Uncover valuable recommendations for designing future cryptographic libraries that balance simplicity, functionality, and security.

Comparing the Usability of Cryptographic APIs

IEEE
Add to list
0:00 / 0:00