Work

Evaluating Static Source Code Analysis Tools

Year: 2010

Type: article

Abstract: This thesis presents the results of an evaluation of source code analyzers. Such tools constitute an inexpensive, efficient and fast way of removing the most common vulnerabilities in a software project, even though not all security flaws can be detected. This evaluation was conducted at CERN, the European Organization for Nuclear Research, in the intent of providing its programmers with a list of dedicated software verification/static source code analysis tools. Particular focus of these tools should be on efficiently finding security flaws. The evaluation covered close to thirty different tools for the major programming languages.

Source: Infoscience (Ecole Polytechnique Fédérale de Lausanne)

Author: Thomas Höfer

Language: English

Topic: Web Application Security Vulnerabilities

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W1944747854

FWCI: 1.488

Cites: 22

Cited by: 17

Related to: 10