Delaitre, A.
, Okun, V.
and Fong, E.
(2013),
Of Massive Static Analysis Data, Software Security and Reliability (SERE) 2013, Gaithersburg, MD
(Accessed May 9, 2025)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Of Massive Static Analysis Data
Published
Author(s)
, ,
Abstract
Static analysis produces large amounts of data. The volume of data allows for new developments in research. Practical observations of the effectiveness of static analysis tools can be derived from that data. The question of tool statistical independence can also find preliminary answers. Effectiveness and independence are the key concepts to answer the one question tool users ask: which tool or set of tools should I use to meet my needs? The Software Assurance Metrics and Tool Evaluation (SAMATE) project at NIST has accumulated and published large amounts of relevant data, during four Static Analysis Tool Expositions (SATE). This collection allowed for the development and validation of practical metrics, in regard to static analysis tool effectiveness and independence. In this paper, we discuss the role of the data in determining which metrics can be derived.Proceedings Title
Software Security and Reliability (SERE) 2013
Conference Dates
June 18-20, 2013
Conference Location
Gaithersburg, MD
Pub Type
Conferences
Keywords
software metrics, static analysis tools, security weaknesses, tool effectiveness, tool independence
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.
Created June 20, 2013, Updated May 4, 2021