The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
Fuente:
arXiv
Guardado en:
| Autores principales: | , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2025
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866915335937982464 |
|---|---|
| author | Ruohonen, Jukka Ramadan, Qusai |
| author_facet | Ruohonen, Jukka Ramadan, Qusai |
| contents | There has been a long-standing hypothesis that a software's popularity is related to its security or insecurity in both research and popular discourse. There are also a few empirical studies that have examined the hypothesis, either explicitly or implicitly. The present work continues with and contributes to this research with a replication-motivated large-scale analysis of software written in the PHP programming language. The dataset examined contains nearly four hundred thousand open source software packages written in PHP. According to the results based on reported security vulnerabilities, the hypothesis does holds; packages having been affected by vulnerabilities over their release histories are generally more popular than packages without having been affected by a single vulnerability. With this replication results, the paper contributes to the efforts to strengthen the empirical knowledge base in cyber and software security. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2502_16670 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages Ruohonen, Jukka Ramadan, Qusai Software Engineering Cryptography and Security There has been a long-standing hypothesis that a software's popularity is related to its security or insecurity in both research and popular discourse. There are also a few empirical studies that have examined the hypothesis, either explicitly or implicitly. The present work continues with and contributes to this research with a replication-motivated large-scale analysis of software written in the PHP programming language. The dataset examined contains nearly four hundred thousand open source software packages written in PHP. According to the results based on reported security vulnerabilities, the hypothesis does holds; packages having been affected by vulnerabilities over their release histories are generally more popular than packages without having been affected by a single vulnerability. With this replication results, the paper contributes to the efforts to strengthen the empirical knowledge base in cyber and software security. |
| title | The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages |
| topic | Software Engineering Cryptography and Security |
| url | https://arxiv.org/abs/2502.16670 |