NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Effect of Static Analysis Tools on Software Security: Preliminary Investigation

Published

Author(s)

Vadim Okun, William F. Guthrie, Romain Gaucher, Paul E. Black

Abstract

Static analysis tools can handle large-scale software and find thousands of defects. But do they improve software security? We evaluate the effect of static analysis tool use on software security in open source projects. We measure security by vulnerability reports in the National Vulnerability Database.
Proceedings Title
Workshop on Quality of Protection | 2007 | QoP
Conference Dates
October 29, 2007
Conference Location
Alexandria, VA
Conference Title
Workshop on Quality of Protection (QoP?07)
Pub Type
Conferences

Keywords

Software Security, Static Analysis Tools, Vulnerability

Citation

Okun, V. , Guthrie, W. , Gaucher, R. and Black, P. (2007), Effect of Static Analysis Tools on Software Security: Preliminary Investigation, Workshop on Quality of Protection | 2007 | QoP, Alexandria, VA (Accessed October 22, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created October 29, 2007, Updated January 27, 2020
Was this page helpful?