Kevin Hermann, M.Sc.

In October 2022, I joined the Chair of Software Engineering as a PhD student. Before, I worked as a research assistant during my studies in applied computer science at the Ruhr-University Bochum. My research focuses on the traceability of security features throughout the software development process.

Almost any software system needs to consider security measures nowadays as the ever growing number of threats and methods used by adversaries increases in complexity. Developers are tasked to protect software systems from these threats through the implementation of security features – functionalities that mitigate threats or protect confidential data such as cryptography. While sophisticated security measures exist, developers still struggle to implement them correctly in their software systems, leading to severe vulnerabilities. Security by design principles aim to incorporate security measures throughout the whole development process instead of pushing it towards the end of the software development lifecycle, where it is the most expensive. Still, developers require means to effectively trace security features throughout this process to constantly perform security compliance checks and recover security features when they need to be maintained.

In my research, we aim to provide a better understanding of security features for developers and means to trace security features within the software development process. We perform systematic literature reviews, conduct interviews with field experts, and develop IDE plugins that aid developers in creating secure systems.

Publications

M. Mukelabai, K. Hermann, T. Berger and J. -P. Steghöfer, “FeatRacer: Locating Features Through Assisted Traceability,” in IEEE Transactions on Software Engineering, doi: 10.1109/TSE.2023.3324719.