The following NTT researcher's paper was accepted at the international conference "The ACM CHI Conference on Human Factors in Computing Systems (CHI) 2023" to be held from April 23 to April 28, 2023.

Fumihiro Kanei,
Social Informatics Laboratories of Service Innovation Laboratory Group

Eitaro Shioji,
Social Informatics Laboratories of Service Innovation Laboratory Group

Mitsuaki Akiyama,
Social Informatics Laboratories of Service Innovation Laboratory Group

CHI is one of the top international conferences in the field of human-computer interaction.

The paper, "Analyzing the Use of Public and In-house Secure Development Guidelines in U.S. and Japanese Industries," presents the results of a survey regarding the utilization and operational issues of "secure development guidelines," which are documents describing policies and design/implementation methods to develop secure software, in industrial development projects. While most existing academic research focuses only on publicly available guidelines, the results presented in this paper reveal that in-house guidelines that the companies have established on their own are more widely used in actual industrial development projects. This paper also reveals that the actionability of the practices for efficiently implementing guidelines recommended by existing studies (e.g., checking whether the software was developed in compliance with the guidelines) varies greatly depending on the attribute of the developers' organization. Specifically, these practices are hard to implement in small development projects or projects conducting contracted development.

These results clarify the gap between academia and industry regarding secure development guidelines and contribute to clarifying issues in promoting secure software development. Promoting secure development based on the survey results will lead to widespread secure systems/services that users can use safely.

NTT will continue to work on fundamental studies aimed at creating innovative technologies, and contribute to a safe and secure society through cybersecurity research and development.