%0 Conference Paper %1 noauthororeditor %A Naiakshina, Alena %A Danilova, Anastasia %A Gerlitz, Eva %A Smith, Matthew %B CHI %D 2020 %I ACM %J Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems. 2020. %K @smithl3s myown %P 1-13 %R 3313831.3376791 %T On Conducting Security Developer Studies with CS Students: Examining a Password-Storage Study with CS Students, Freelancers, and Company Developers. %U http://dblp.uni-trier.de/db/conf/chi/chi2020.html#NaiakshinaDG020 %X Ecological validity is a major concern in usable security stud­ies with developers. Many studies are conducted with com­puter science (CS) students out of convenience, since recruit­ing professional software developers in sufficient numbers is very challenging. In a password-storage study, Naiakshina et al. 28 showed that CS students behave similarly to free­lance developers recruited online. While this is a promising result for conducting developer studies with students, an open question remains: Do professional developers employed in companies behave similarly as well? To provide more insight into the ecological validity of recruiting students for secu­rity developer studies, we replicated the study of Naiakshina et al. with developers from diverse companies in Germany. We found that developers employed in companies performed better than students and freelancers in a direct comparison. However, treatment effects were found to be significant in all groups; the treatment effects on CS students also held for company developers. %@ 78-1-4503-6708-0/20/04

@inproceedings{noauthororeditor, abstract = {Ecological validity is a major concern in usable security stud­ies with developers. Many studies are conducted with com­puter science (CS) students out of convenience, since recruit­ing professional software developers in sufficient numbers is very challenging. In a password-storage study, Naiakshina et al. [28] showed that CS students behave similarly to free­lance developers recruited online. While this is a promising result for conducting developer studies with students, an open question remains: Do professional developers employed in companies behave similarly as well? To provide more insight into the ecological validity of recruiting students for secu­rity developer studies, we replicated the study of Naiakshina et al. with developers from diverse companies in Germany. We found that developers employed in companies performed better than students and freelancers in a direct comparison. However, treatment effects were found to be significant in all groups; the treatment effects on CS students also held for company developers. }, added-at = {2020-08-14T13:26:04.000+0200}, author = {Naiakshina, Alena and Danilova, Anastasia and Gerlitz, Eva and Smith, Matthew}, biburl = {https://www.bibsonomy.org/bibtex/2421fbcd2506abf07d188a0bf1426cf43/danilova}, booktitle = {CHI}, doi = {3313831.3376791}, interhash = {e5752509dea8273acebfdaca9b568603}, intrahash = {421fbcd2506abf07d188a0bf1426cf43}, isbn = {78-1-4503-6708-0/20/04}, journal = {Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems. 2020.}, keywords = {@smithl3s myown}, language = {englisch}, pages = {1-13}, publisher = {ACM}, timestamp = {2020-08-25T12:23:28.000+0200}, title = {On Conducting Security Developer Studies with CS Students: Examining a Password-Storage Study with CS Students, Freelancers, and Company Developers.}, url = {http://dblp.uni-trier.de/db/conf/chi/chi2020.html#NaiakshinaDG020}, year = 2020 }