Built on

How do developers act on static analysis alerts? an empirical study of coverity usage
Nasif Imtiaz, Brendan Murphy, and Laurie Williams · 2019
Earlier work this paper cites.

Similar

https://cwe.mitre.org/index.html
Common weakness enumeration
Cited in the paper.
https://nvd.nist.gov/vuln/full-listing
National vulnerability database
Cited in the paper.

Nothing clear enough to list yet.

alphaXiv searches the wider corpus for related work and actual follow-ups.

alphaXiv is searching for related work…

Reading the bibliography…

2021

Imtiaz, Nasif, Williams, Laurie

We study 10 C/C++ projects that have been using a static analysis security testing tool.

We analyze the historical scan reports generated by the tool and study how frequently memory-related alerts appeared.
We also studied the subsequent developer action on those alerts.
We also look at the CVEs published for these projects within the study timeline and investigate how many of them are memory related.

How do developers act on static analysis alerts? an empirical study of coverity usage
Nasif Imtiaz, Brendan Murphy, and Laurie Williams · 2019
Earlier work this paper cites.

https://cwe.mitre.org/index.html
Common weakness enumeration
Cited in the paper.
https://nvd.nist.gov/vuln/full-listing
National vulnerability database
Cited in the paper.

Nothing clear enough to list yet.

alphaXiv searches the wider corpus for related work and actual follow-ups.

alphaXiv is searching for related work…