Research on source code safety defects based on static test tools
Guangwei Wang
Abstract
Guangwei Wang
Abstract
To cope with the problem of high false negatives and false positives in source code static analysis methods with a static test tool,this paper presented a static analysis detection method for safety defects detection based on several static test tools.This method made statistical analysis on the outcome of different static test tools,which greatly decreased the false negatives and false positives.It designed and implemented a scalable source code static analysis tool platform,and it was proved by experiment that this platform has a better performance with lower false negatives and false positives compared with one single static test tool.
A significance statement is not available in the OpenAlex record.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
To cope with the problem of high false negatives and false positives in source code static analysis methods with a static test tool,this paper presented a static analysis detection method for safety defects detection based on several static test tools.This method made statistical analysis on the outcome of different static test tools,which greatly decreased the false negatives and false positives.It designed and implemented a scalable source code static analysis tool platform,and it was proved by experiment that this platform has a better performance with lower false negatives and false positives compared with one single static test tool.
Key concepts: Static analysis, False positive paradox, Computer science, Static program analysis, False positives and false negatives, Source code, True positive rate, Code coverage