{"id":"https://openalex.org/W4312000425","doi":"https://doi.org/10.1002/spe.3175","title":"Toward a readiness model for secure software coding","display_name":"Toward a readiness model for secure software coding","publication_year":2022,"publication_date":"2022-12-09","ids":{"openalex":"https://openalex.org/W4312000425","doi":"https://doi.org/10.1002/spe.3175"},"language":"en","primary_location":{"id":"doi:10.1002/spe.3175","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.3175","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027472030","display_name":"Mamoona Humayun","orcid":"https://orcid.org/0000-0001-6339-2257"},"institutions":[{"id":"https://openalex.org/I199702508","display_name":"Jouf University","ror":"https://ror.org/02zsyt821","country_code":"SA","type":"education","lineage":["https://openalex.org/I199702508"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Mamoona Humayun","raw_affiliation_strings":["Department of Information Systems, College of Computer and Information Sciences Jouf University  Al\u2010Jouf Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-6339-2257","affiliations":[{"raw_affiliation_string":"Department of Information Systems, College of Computer and Information Sciences Jouf University  Al\u2010Jouf Saudi Arabia","institution_ids":["https://openalex.org/I199702508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041382184","display_name":"Mahmood Niazi","orcid":"https://orcid.org/0000-0001-7318-7644"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mahmood Niazi","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029582839","display_name":"N. Z. Jhanjhi","orcid":"https://orcid.org/0000-0001-8116-4733"},"institutions":[{"id":"https://openalex.org/I4210143550","display_name":"Taylor's University","ror":"https://ror.org/0498pcx51","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210143550"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Noor Zaman Jhanjhi","raw_affiliation_strings":["School of Computer Science and Engineering (SCE) Taylor's University  Selangor Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering (SCE) Taylor's University  Selangor Malaysia","institution_ids":["https://openalex.org/I4210143550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007816848","display_name":"Sajjad Mahmood","orcid":"https://orcid.org/0000-0001-5786-5118"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sajjad Mahmood","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-5786-5118","affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014589730","display_name":"Mohammad Alshayeb","orcid":"https://orcid.org/0000-0001-7950-0099"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammad Alshayeb","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-7950-0099","affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5027472030"],"corresponding_institution_ids":["https://openalex.org/I199702508"],"apc_list":{"value":4220,"currency":"USD","value_usd":4220},"apc_paid":null,"fwci":1.47,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.83654038,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":"53","issue":"4","first_page":"1013","last_page":"1035"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9757999777793884,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11891","display_name":"Big Data and Business Intelligence","score":0.9552000164985657,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.8366756439208984},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7034038305282593},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5674766898155212},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5664001107215881},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5640822649002075},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.5374932885169983},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.5309017896652222},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5285474061965942},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5252724885940552},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4837805926799774},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.4678381681442261},{"id":"https://openalex.org/keywords/code-review","display_name":"Code review","score":0.45364782214164734},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.44244521856307983},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.41873684525489807},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17203214764595032},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.13215160369873047},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.12246048450469971}],"concepts":[{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.8366756439208984},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7034038305282593},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5674766898155212},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5664001107215881},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5640822649002075},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.5374932885169983},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.5309017896652222},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5285474061965942},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5252724885940552},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4837805926799774},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.4678381681442261},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.45364782214164734},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.44244521856307983},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.41873684525489807},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17203214764595032},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.13215160369873047},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.12246048450469971},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/spe.3175","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.3175","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G928152716","display_name":null,"funder_award_id":"DF201007","funder_id":"https://openalex.org/F4320322323","funder_display_name":"King Fahd University of Petroleum and Minerals"}],"funders":[{"id":"https://openalex.org/F4320322323","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W584825219","https://openalex.org/W626067554","https://openalex.org/W1481826112","https://openalex.org/W1554355587","https://openalex.org/W1967446222","https://openalex.org/W1995723046","https://openalex.org/W2013970737","https://openalex.org/W2016441490","https://openalex.org/W2029815481","https://openalex.org/W2052827706","https://openalex.org/W2065461065","https://openalex.org/W2074937108","https://openalex.org/W2295271991","https://openalex.org/W2296718798","https://openalex.org/W2338764475","https://openalex.org/W2507315740","https://openalex.org/W2531818755","https://openalex.org/W2555855703","https://openalex.org/W2560483663","https://openalex.org/W2585020150","https://openalex.org/W2593042969","https://openalex.org/W2614017418","https://openalex.org/W2622364733","https://openalex.org/W2759023773","https://openalex.org/W2766217896","https://openalex.org/W2783539613","https://openalex.org/W2884058242","https://openalex.org/W2896439122","https://openalex.org/W2899643194","https://openalex.org/W2908382622","https://openalex.org/W2909755058","https://openalex.org/W2911702371","https://openalex.org/W2964225793","https://openalex.org/W2964781046","https://openalex.org/W2971802583","https://openalex.org/W2986807064","https://openalex.org/W2997258927","https://openalex.org/W2998602372","https://openalex.org/W3000941819","https://openalex.org/W3013671401","https://openalex.org/W3015499098","https://openalex.org/W3021832040","https://openalex.org/W3032641712","https://openalex.org/W3038832621","https://openalex.org/W3038935150","https://openalex.org/W3047382769","https://openalex.org/W3089558885","https://openalex.org/W3093988603","https://openalex.org/W3095867822","https://openalex.org/W3109049172","https://openalex.org/W3120240372","https://openalex.org/W3129161282","https://openalex.org/W3135463650","https://openalex.org/W3164682541","https://openalex.org/W4221010473","https://openalex.org/W4241995000","https://openalex.org/W4301892172"],"related_works":["https://openalex.org/W1981466760","https://openalex.org/W1486481742","https://openalex.org/W4321227771","https://openalex.org/W2809528855","https://openalex.org/W2968544084","https://openalex.org/W2052691027","https://openalex.org/W3142482686","https://openalex.org/W4378554228","https://openalex.org/W2059978193","https://openalex.org/W4214596491"],"abstract_inverted_index":{"Abstract":[0],"The":[1,23,38,115,132,154,163],"heart":[2],"of":[3,40],"the":[4,13,17,45,59,66,73,81,88,97,137,167],"application's":[5,60],"secure":[6,151],"operation":[7],"is":[8,28,75],"its":[9],"software":[10,26,51,54,98,152],"code.":[11,153],"If":[12],"code":[14,47,67,74,78],"contains":[15],"flaws,":[16],"entire":[18],"program":[19,46],"might":[20],"be":[21],"hacked.":[22],"issue":[24],"with":[25,44],"vulnerabilities":[27],"that":[29,34,90,166],"they":[30],"reveal":[31],"coding":[32],"flaws":[33],"hackers":[35],"could":[36],"exploit.":[37],"prevention":[39],"cybersecurity":[41],"issues":[42],"begins":[43],"itself.":[48],"When":[49],"writing":[50],"code,":[52],"a":[53,108,147],"developer":[55],"must":[56],"consider":[57],"expressing":[58],"architecture":[61],"and":[62,69,71,123,143,145],"design":[63],"requirements,":[64],"keeping":[65],"streamlined":[68],"efficient,":[70],"ensuring":[72],"safe.":[76],"Secure":[77,101],"helps":[79,170],"save":[80],"system":[82],"from":[83],"various":[84],"cyber\u2010attacks":[85],"by":[86],"eliminating":[87],"weaknesses":[89],"many":[91],"hacks":[92],"rely":[93],"on.":[94],"To":[95],"assist":[96],"organization":[99],"in":[100],"Software":[102],"Coding":[103],"(SSC),":[104],"this":[105],"article":[106],"proposes":[107],"readiness":[109],"model":[110,117,134,156],"for":[111,149],"SSC,":[112],"namely":[113],"SSCRM.":[114],"proposed":[116,133,155,168],"has":[118],"five":[119],"levels;":[120],"SSC":[121,141,174],"challenges":[122,142],"best":[124],"practices":[125],"(BP)":[126],"are":[127],"mapped":[128],"at":[129],"each":[130],"level.":[131,175],"will":[135],"help":[136],"organizations":[138],"better":[139],"understand":[140],"BPs":[144],"provide":[146],"roadmap":[148],"developing":[150],"was":[157],"evaluated":[158],"using":[159],"three":[160],"case":[161],"studies.":[162],"findings":[164],"demonstrate":[165],"approach":[169],"determine":[171],"an":[172],"organization's":[173]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4}],"updated_date":"2026-06-18T08:10:14.011955","created_date":"2025-10-10T00:00:00"}