Serious Game for Industrial Cybersecurity: Experiential Learning through Code Review
Every stage of the industrial software development process is crucial for ensuring high-quality results in a time of increasing digitalization and complexity. Code review is a method to enhance software quality and also promote knowledge exchange among teams. It is generally accepted that the earlier that software bugs and vulnerabilities are caught during product development, the more costs can be saved. As such, code review can play an important role in industrial software development.
However, industry experience showcases that code review can be resource-intensive, and the direct impact on code quality can be hard to quantify. Related work shows that practitioners performing code reviews do not focus specifically on security, partly due to a gap in awareness of the topic.
Our research focuses on improving the efficiency and effectiveness of code review practices, particularly in identifying and addressing security issues in an industrial context.
The present work showcases results from using a serious game as a means to empower developers, by showcasing code review best practices and raising awareness of security concerns. we collect results over a series of 11 experiments conducted in an industrial setting together with a total of 175 practitioners, serving as a pilot stage, based on which we facilitate discussions and conclude on important aspects of the design of the game.
Tue 30 JulDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
13:00 - 15:00 | |||
13:00 30mTalk | Mastering Software Craftsmanship: An Industrial Practitioner Perspective Industry Track | ||
13:30 30mTalk | Serious Game for Industrial Cybersecurity: Experiential Learning through Code Review Industry Track Andrei-Cristian Iosif , Ulrike Lechner Universität der Bundeswehr München, Maria Pinto-Albuquerque Instituto Universitário de Lisboa (ISCTE-IUL), Tiago Espinha Gasiba Siemens AG | ||
14:00 30mTalk | Experience Report of the AWS+KCL Impact Accelerator for Public Sector Engagement Industry Track Caitlin Bentley , Elena Simperl , Mike Brainbridge , Daisy Ogden , Stefanos Leonardos , Gunel Jahangirova King's College London, Johanna Walker , Wenjie Yin , Christopher Hampson | ||
14:30 30mTalk | Can LLMs Facilitate Onboarding Software Developers? An Ongoing Industrial Case Study Industry Track Maider Azanza University of the Basque Country (UPV/EHU), Juanan Pereira , Arantza Irastorza University of the Basque Country (UPV/EHU), Aritz Galdos |
Enter the building and take the main stairs or elevator to the top floor.