Securing Your Crypto-API Usage Through Tool Support - A Usability Study

Our user study shows that the Eclipse plugin CogniCrypt reduces misuses and speeds development, enhancing security and efficiency for cryptographic API usage. Through a controlled experiment with 24 Java developers, we found that CogniCrypt significantly improves code security and development speed for cryptography-related tasks. Developers appreciate CogniCrypt’s code generation and static analysis, though integrating the generated code remains a challenge.

October 2023 · Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Mira Mezini, Yasemin Acar, Sascha Fahl