Background Digitalization and rapid technological improvement in the present day bring numerous benefits, but they also raise the complexity and diversity of cyber security risks, putting critical information security issues on the agenda. Growing issues and worries about information security endanger not only the security of individuals and organizations but also global social and economic stability. Methods This study investigates the issues and challenges regarding information security by analyzing all the postings on ISSE (Information Security Stack Exchange), a Q&A website focused on information security. In order to identify the primary topics addressed in postings shared on the ISSE platform, we employed a probabilistic topic modeling method called latent Dirichlet allocation (LDA), which is generative in nature and relies on unsupervised machine learning processes. Results Through this investigation, a total of 38 topics were identified, demonstrating the present state of information security issues and challenges. Considering these topics, a comprehensive taxonomy of seven categories was devised to address information security issues, taking into account their backgrounds and perspectives. Subsequently, we conducted an examination of the prevalence and complexity of the matters at hand. In addition, we have defined the prevailing technologies utilized in the realm of information security, including tasks, certifications, standards, methods, tools, threats, and defenses. We have provided a number of implications for different stakeholders, including academics, developers, educators, and practitioners, who are working towards advancing the field of information security.

中文翻译：

---

开发人员在谈论信息安全什么？使用问答帖子语义分析的大规模研究

背景技术当今数字化和技术的快速进步带来了众多好处，但也增加了网络安全风险的复杂性和多样性，将关键的信息安全问题提上议程。日益严重的信息安全问题和担忧不仅危及个人和组织的安全，也危及全球社会和经济的稳定。方法本研究通过分析 ISSE（信息安全堆栈交换）（一个专注于信息安全的问答网站）上的所有帖子来调查有关信息安全的问题和挑战。为了识别 ISSE 平台上共享的帖子中涉及的主要主题，我们采用了一种称为潜在狄利克雷分配 (LDA) 的概率主题建模方法，该方法本质上是生成性的，并且依赖于无监督的机器学习过程。结果通过本次调查，共确定了38个主题，展示了信息安全问题和挑战的现状。考虑到这些主题，考虑到他们的背景和观点，设计了七个类别的综合分类法来解决信息安全问题。随后，我们对当前问题的普遍性和复杂性进行了检查。此外，我们还定义了信息安全领域使用的主流技术，包括任务、认证、标准、方法、工具、威胁和防御。我们为致力于推进信息安全领域发展的不同利益相关者（包括学者、开发人员、教育工作者和从业者）提供了许多建议。