# Better-Safe-Than-Sorry

> This repository is part of the paper "Better Safe Than Sorry! Automated Identification of Breaking Security-Configuration Rules" accepted at the "4th ACM/IEEE International Conference on Automation of Software Test (AST)". https://conf.researchr.org

**Wikidata**: [Q127485253](https://www.wikidata.org/wiki/Q127485253)  
**Source**: https://4ort.xyz/entity/better-safe-than-sorry

## Summary
Better-Safe-Than-Sorry is a free software repository associated with the research paper "Better Safe Than Sorry! Automated Identification of Breaking Security-Configuration Rules." It serves as a tool for the automated identification of functionality-breaking security configurations. The project was accepted at the 4th ACM/IEEE International Conference on Automation of Software Test (AST).

## Key Facts
- **License:** Apache Software License 2.0
- **Latest Version:** 0.1.2 (released March 4, 2023)
- **Previous Version:** 0.1.1 (released January 10, 2023)
- **Repository URL:** https://github.com/tum-i4/Better-Safe-Than-Sorry
- **Instance of:** Software, Free Software
- **Associated Conference:** 4th ACM/IEEE International Conference on Automation of Software Test (AST)
- **Described by Source:** "Better Safe Than Sorry! Automated Identification of Functionality-Breaking Security-Configuration Rules"

## FAQs
### Q: What is the primary function of Better-Safe-Than-Sorry?
A: It is an automated tool used to identify security-configuration rules that may break software functionality. It supports the findings of the academic paper "Better Safe Than Sorry! Automated Identification of Breaking Security-Configuration Rules."

### Q: Under what license is the software distributed?
A: The software is distributed as free software under the Apache Software License 2.0.

### Q: Where can the source code be found?
A: The source code is hosted on GitHub at https://github.com/tum-i4/Better-Safe-Than-Sorry.

## Why It Matters
Better-Safe-Than-Sorry addresses the critical trade-off between software security and functionality. In software development, implementing security configurations often carries the risk of inadvertently breaking existing features, a problem that is notoriously difficult to diagnose manually. By automating the identification of these "functionality-breaking" rules, this tool provides developers and researchers with a method to enforce security policies without sacrificing application stability.

The project is significant within the field of software testing and automation, evidenced by its acceptance at the "4th ACM/IEEE International Conference on Automation of Software Test (AST)." It represents a practical application of academic research into software reliability, offering a reproducible method for detecting configuration conflicts. The release of this tool under an open license (Apache 2.0) allows for broader adoption and iteration by the software engineering community.

## Notable For
- **Academic Recognition:** The repository is directly linked to a peer-reviewed paper accepted at the 4th ACM/IEEE International Conference on Automation of Software Test (AST).
- **Specific Problem Solving:** It targets the niche but critical issue of functionality-breaking security configurations, distinguishing it from general security scanners.
- **Open Source Availability:** It is accessible as free software under the Apache Software License 2.0, permitting free use, study, and distribution.
- **Active Maintenance:** The project had multiple stable releases in early 2023 (v0.1.1 and v0.1.2).

## Body
### Overview and Context
Better-Safe-Than-Sorry is a software tool categorized as free software. It acts as the implementation and artifact for the research paper titled "Better Safe Than Sorry! Automated Identification of Functionality-Breaking Security-Configuration Rules." The project aims to automate the testing process for security configurations to ensure they do not disrupt intended software behaviors.

### Development and Release History
The project has recorded stable version releases in the first quarter of 2023.
- **Version 0.1.1:** Released on January 10, 2023.
- **Version 0.1.2:** Released on March 4, 2023. This is marked as the preferred stable version.

### Technical Classification
The entity is classified as an instance of "software" and "free software." It is distinct from general proprietary tools as it allows users to freely run, study, change, and distribute the code under the Apache Software License 2.0.

### Academic and Source References
The tool is strictly tied to its academic origins.
- **Paper Title:** "Better Safe Than Sorry! Automated Identification of Functionality-Breaking Security-Configuration Rules"
- **Event:** 4th ACM/IEEE International Conference on Automation of Software Test (AST)
- **Source Code:** Hosted by the tum-i4 organization on GitHub.

## References

1. [Release 0.1.1. 2023](https://github.com/tum-i4/Better-Safe-Than-Sorry/releases/tag/0.1.1)
2. [Release 0.1.2. 2023](https://github.com/tum-i4/Better-Safe-Than-Sorry/releases/tag/0.1.2)