Snakes in Paradise?: Insecure Python-related Coding Practices in Stack Overflow (MSR 2019 - Mining Challenge) - MSR 2019

Write a Blog >>

Sun 26 - Mon 27 May 2019 Montreal, QC, Canada

co-located with ICSE 2019

Who

Akond Rahman, Effat Farhana, Nasif Imtiaz

Track

MSR 2019 MSR Mining Challenge

Time Zone

The program is currently displayed in (GMT-04:00) Eastern Time (US & Canada).

Use conference time zone: (GMT-04:00) Eastern Time (US & Canada)Select other time zone

The GMT offsets shown reflect the offsets at the moment of the conference.

Time Band

By setting a time band, the program will dim events that are outside this time window. This is useful for (virtual) conferences with a continuous program (with repeated sessions).
The time band will also limit the events that are included in the personal iCalendar subscription service.

Display full programSpecify a time band

When

Sun 26 May 2019 16:17 - 16:24 at Place du Canada - Mining Challenge presentations

Abstract

Despite being the most popular question and answer website for software developers, answers posted on Stack Overflow (SO) are susceptible to contain Python-related insecure coding practices. A systematic analysis on how frequently insecure coding practices appear in SO answers can help the SO community assess the prevalence of insecure Python code blocks in SO. An insecure coding practice is recurrent use of insecure coding patterns in Python. We conduct an empirical study using 529,054 code blocks collected from Python-related 44,966 answers posted on SO. We observe 7.1% of the 44,966 Python-related answers to include at least one insecure coding practice. The most frequently occurring insecure coding practice is code injection. We observe 9.8% of the 7,444 accepted answers to include at least one insecure code block. We also find user reputation not to relate with the presence of insecure code blocks, suggesting both high and low-reputed users are likely to introduce insecure code blocks.

Link to Preprint

https://akondrahman.github.io/papers/msr19_security.pdf

Akond Rahman

North Carolina State University

United States

Effat Farhana

Nasif Imtiaz

North Carolina State University

United States

Time Zone

The program is currently displayed in (GMT-04:00) Eastern Time (US & Canada).

Use conference time zone: (GMT-04:00) Eastern Time (US & Canada)Select other time zone

The GMT offsets shown reflect the offsets at the moment of the conference.

Time Band

By setting a time band, the program will dim events that are outside this time window. This is useful for (virtual) conferences with a continuous program (with repeated sessions).
The time band will also limit the events that are included in the personal iCalendar subscription service.

Display full programSpecify a time band

Session Program

Sun 26 May
Displayed time zone: Eastern Time (US & Canada) change

	16:00 - 18:00	Mining Challenge presentationsMSR 2019 Mining Challenge at Place du Canada

	16:00 10m Talk		SOTorrent: Studying the Origin, Evolution, and Usage of Stack Overflow Code Snippets MSR 2019 Mining Challenge A: Sebastian Baltes University of Trier, A: Christoph Treude The University of Adelaide, A: Stephan Diehl Computer Science, University Trier, Germany Pre-print
	16:10 7m Talk		Mining Rule Violations in JavaScript Code Snippets MSR 2019 Mining Challenge Uriel Ferreira Campos , Guilherme Smethurst , João Pedro Moraes , Rodrigo Bonifácio University of Brasília, Brazil, Gustavo Pinto UFPA Pre-print
	16:17 7m Talk		Snakes in Paradise?: Insecure Python-related Coding Practices in Stack Overflow MSR 2019 Mining Challenge Akond Rahman North Carolina State University, Effat Farhana , Nasif Imtiaz North Carolina State University Pre-print
	16:24 7m Talk		Man vs Machine -- A Study into language identification of Stackoverflow code snippets MSR 2019 Mining Challenge Jens Dietrich Victoria University of Wellington, Markus Luczak-Roesch , Elroy Dalefield Pre-print
	16:31 7m Talk		Python Coding Style Compliance on Stack Overflow MSR 2019 Mining Challenge Nikolaos Bafatakis , Niels Boecker , Wenjie Boon , Martin Cabello Salazar , Jens Krinke University College London, Gazi Oznacar , Robert White University College London, UK Pre-print Media Attached
	16:38 7m Talk		Towards Mining Answer Edits to Extract Evolution Patterns in Stack Overflow MSR 2019 Mining Challenge Themistoklis Diamantopoulos Electrical and Computer Engineering Dept, Aristotle University of Thessaloniki, Maria-Ioanna Sifaki Electrical and Computer Engineering Dept, Aristotle University of Thessaloniki, Andreas Symeonidis Aristotle University of Thessaloniki Pre-print Media Attached
	16:45 7m Talk		Analyzing Comment-induced Updates on Stack Overflow MSR 2019 Mining Challenge Abhishek Soni , Sarah Nadi University of Alberta Pre-print
	16:52 7m Talk		What Edits Are Done on Highly Answered Stack Overflow Questions? An Empirical Study MSR 2019 Mining Challenge Xianhao Jin Virginia Tech, USA, Francisco Servant Virginia Tech Pre-print
	16:59 7m Talk		Can Duplicate Posts on Stack Overflow Benefit the Software Development Community? MSR 2019 Mining Challenge Durham Abric McGill University, Oliver Clark , Matthew Caminiti , Keheliya Gallaba McGill University, Shane McIntosh McGill University Pre-print
	17:06 7m Talk		How Often and What StackOverflow Posts Do Developers Reference in Their GitHub Projects? MSR 2019 Mining Challenge Saraj Singh Manes , Olga Baysal Carleton University Pre-print
	17:13 7m Talk		Characterizing Duplicate Code Snippets between Stack Overflow and Tutorials MSR 2019 Mining Challenge Manziba Nishi , Agnieszka Ciborowska , Kostadin Damevski Virginia Commonwealth University Pre-print
	17:20 7m Talk		Challenges with Responding to Static Analysis Tool Alerts MSR 2019 Mining Challenge Nasif Imtiaz North Carolina State University, Akond Rahman North Carolina State University, Effat Farhana , Laurie Williams North Carolina State University Pre-print
	17:27 7m Talk		Impact of stack overflow code snippets on software cohesion: a preliminary study MSR 2019 Mining Challenge Mashal Ahmad , Mel Ó Cinnéide DOI Pre-print
	17:34 7m Talk		We Need to Talk about Microservices: an Analysis from the Discussions on StackOverflow MSR 2019 Mining Challenge Alan Bandeira , Carlos Filho , Matheus Paixao State University of Ceara, Brazil, Paulo Maia State University of Ceará Pre-print Media Attached
	17:41 7m Talk		What do developers know about machine learning: a study of ML discussions on StackOverflow MSR 2019 Mining Challenge Hareem-e-Sahar , Abdul Ali Bangash University of Alberta, Canada, Alexander William Wong , Shaiful Chowdhury University of Alberta, Abram Hindle University of Alberta, Karim Ali University of Alberta
	17:48 12m		Recap + voting MSR 2019 Mining Challenge