Home > Research > Publications & Outputs > Recognizing the Known Unknowns

Links

Text available via DOI:

View graph of relations

Recognizing the Known Unknowns: the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer’s Security Perceptions

Research output: Contribution to Journal/MagazineJournal articlepeer-review

Published

Standard

Recognizing the Known Unknowns: the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer’s Security Perceptions. / Ivory, Matthew; Towse, John; Sturdee, Miriam et al.
In: Technology, Mind, and Behavior, Vol. 4, No. 3, 24.11.2023.

Research output: Contribution to Journal/MagazineJournal articlepeer-review

Harvard

APA

Vancouver

Author

Bibtex

@article{3aef1ee2c48d460c92d66b66082d70e7,
title = "Recognizing the Known Unknowns: the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer{\textquoteright}s Security Perceptions",
abstract = "Software development is a complex process requiring aspects of social, cognitive, and technical skills. Software engineers face high levels of uncertainty and risk during functional and security decision making. This preregistered study investigates behavioral measures of cognitive reflection, risk aversion, and optimism bias among professional freelance software developers and computer science students, to expose relationships between uncertainty-associated language and risk sensitivity. We employ content analysis with a mixed-effect model to understand how psychological dimensions influence risk sensitivity in secure software development. We show an interaction between cognitive reflection and optimism bias in the proportion of uncertainty-related language used. Overly optimistic outlooks combined with higher cognitive reflection drives up expressions of uncertainty, while pessimistic or realistic individuals reduce uncertainty as cognitive reflection increases. Software engineers who hold average or pessimistic views on the security of their code are more likely to speak more intuitively about security and risk. We discuss the potential of our findings in relation to understanding how to leverage language used by engineers as markers of risk aversion. Encouraging increased discourse could be used as a catalyst for increased cognitive reflection and grounding optimistic behaviors, leading to more careful decisions.",
author = "Matthew Ivory and John Towse and Miriam Sturdee and Mark Levine and Bashar Nuseibeh",
year = "2023",
month = nov,
day = "24",
doi = "10.31234/osf.io/vrf97",
language = "English",
volume = "4",
journal = "Technology, Mind, and Behavior",
issn = "2689-0208",
publisher = "American Psychological Association",
number = "3",

}

RIS

TY - JOUR

T1 - Recognizing the Known Unknowns

T2 - the Interaction Between Reflective Thinking and Optimism for Uncertainty Among Software Developer’s Security Perceptions

AU - Ivory, Matthew

AU - Towse, John

AU - Sturdee, Miriam

AU - Levine, Mark

AU - Nuseibeh, Bashar

PY - 2023/11/24

Y1 - 2023/11/24

N2 - Software development is a complex process requiring aspects of social, cognitive, and technical skills. Software engineers face high levels of uncertainty and risk during functional and security decision making. This preregistered study investigates behavioral measures of cognitive reflection, risk aversion, and optimism bias among professional freelance software developers and computer science students, to expose relationships between uncertainty-associated language and risk sensitivity. We employ content analysis with a mixed-effect model to understand how psychological dimensions influence risk sensitivity in secure software development. We show an interaction between cognitive reflection and optimism bias in the proportion of uncertainty-related language used. Overly optimistic outlooks combined with higher cognitive reflection drives up expressions of uncertainty, while pessimistic or realistic individuals reduce uncertainty as cognitive reflection increases. Software engineers who hold average or pessimistic views on the security of their code are more likely to speak more intuitively about security and risk. We discuss the potential of our findings in relation to understanding how to leverage language used by engineers as markers of risk aversion. Encouraging increased discourse could be used as a catalyst for increased cognitive reflection and grounding optimistic behaviors, leading to more careful decisions.

AB - Software development is a complex process requiring aspects of social, cognitive, and technical skills. Software engineers face high levels of uncertainty and risk during functional and security decision making. This preregistered study investigates behavioral measures of cognitive reflection, risk aversion, and optimism bias among professional freelance software developers and computer science students, to expose relationships between uncertainty-associated language and risk sensitivity. We employ content analysis with a mixed-effect model to understand how psychological dimensions influence risk sensitivity in secure software development. We show an interaction between cognitive reflection and optimism bias in the proportion of uncertainty-related language used. Overly optimistic outlooks combined with higher cognitive reflection drives up expressions of uncertainty, while pessimistic or realistic individuals reduce uncertainty as cognitive reflection increases. Software engineers who hold average or pessimistic views on the security of their code are more likely to speak more intuitively about security and risk. We discuss the potential of our findings in relation to understanding how to leverage language used by engineers as markers of risk aversion. Encouraging increased discourse could be used as a catalyst for increased cognitive reflection and grounding optimistic behaviors, leading to more careful decisions.

U2 - 10.31234/osf.io/vrf97

DO - 10.31234/osf.io/vrf97

M3 - Journal article

VL - 4

JO - Technology, Mind, and Behavior

JF - Technology, Mind, and Behavior

SN - 2689-0208

IS - 3

ER -