Increasing Software Security by Using Mental Models

Cybercrime is a global problem and the economic damages are enormous [1]. Identifying reasons for software vulnerabilities is an important issue with some researchers assuming software developers to be part of the problem. As most developers aren’t security experts they create insecure and thus vulnerable software. To avoid this, a tool that supports software developers in dealing with security issues should be developed. This work uses the structure formation technique [2] as a first step to develop the mental models of software developers when dealing with security measures. A core definition of mental models is compiled and the results of a pilot study deliver valuable information for the supporting tool. In further research the developed mental models of novices’ (software developers) should be compared with the mental models of security experts. On this basis the reliability of the novices’ mental models can be reviewed and occurring problems identified

The Argumentative Mediator

In this paper we introduce a negotiation mediator in a multiagent context. When negotiation fails, a mediator can interact with the parties, find out about their goals, ontologies, and arguments for and against negotiation outcome, and suggest solutions based on previous experience. An algorithmic schema to be instantiated with particular argumentation, semantic alignment and case-base reasoning techniques is presented. The proposal is neutral with respect to which particular technique is selected. An example illustrates the approach that is framed in the existing body of literature on argumentation and mediation.This research has been supported by Generalitat de Catalunya project 2014 SGR 118.Peer Reviewe