Exploring the usability and effectiveness of interactive annotation and code review for the detection of security vulnerabilities

Abstract

According to a recent IBM study, the average cost for a stolen record raised 9% to $145 in 2014 [1]. Since millions of credit card records are stolen every year, the cost can easily run into billions of dollars. Consequently, application security is a very important concern during the development of applications today. Resolving security problems later in the development process is very time consuming and expensive. Therefore, it is favorable to detect and resolve security vulnerabilities as soon as possible during the development process.