Fetching the paper…
Reading the bibliography…
Early identification of security issues in software development is vital to minimize their unanticipated impacts.
Static and dynamic analysis: synergy and duality. In
Michael D. Ernst. 2004 · 2004
Earlier work this paper cites.
When do changes induce fixes?
ŚliwerskiJacek, ZimmermannThomas, and ZellerAndreas. 2005 · 2005
Earlier work this paper cites.
On establishing a benchmark for evaluating static analysis alert prioritization and classification techniques. In
Sarah Heckman and Laurie Williams. 2008 · 2008
Earlier work this paper cites.
What types of defects are really discovered in code reviews?
Mika V. Mäntylä and Casper Lassenius. 2009 · 2008
Earlier work this paper cites.
The life and death of statically detected vulnerabilities: An empirical study
Massimiliano Di Penta, Luigi Cerulo, and Lerina Aversano. 2009 · 2009
Earlier work this paper cites.
Securing opensource code via static analysis. In
Raghudeep Kannavara. 2012 · 2012
Earlier work this paper cites.
To what extent could we detect field defects? An empirical study of false negatives in static bug finding tools. In
Ferdian Thung, Lucia, David Lo, Lingxiao Jiang, Foyzur Rahman, and Premkumar T. Devanbu. 2012 · 2012
Earlier work this paper cites.
Reducing human effort and improving quality in peer code reviews using automatic static analysis and reviewer recommendation. In
Vipin Balachandran. 2013 · 2013
Earlier work this paper cites.
Convergent Contemporary Software Peer Review Practices. In
Peter C Rigby and Christian Bird. 2013 · 2013
Earlier work this paper cites.
Modern code reviews in open-source projects: Which problems do they fix?. In
Moritz Beller, Alberto Bacchelli, Andy Zaidman, and Elmar Juergens. 2014 · 2014
Earlier work this paper cites.
Security vulnerabilities of the top ten programming languages: C, Java, C++, Objective-C, C#, PHP, Visual Basic, Python, Perl, and Ruby
Stephen Turner. 2014 · 2014
Earlier work this paper cites.
NVD - CVE-2015-8895
2015a · 2015
Earlier work this paper cites.
NVD - CVE-2015-9059
2015b · 2015
Earlier work this paper cites.
On the capability of static code analysis to detect security vulnerabilities
Katerina Goseva-Popstojanova and Andrei Perhinschi. 2015 · 2015
Earlier work this paper cites.
Would static analysis tools help developers with code reviews?. In
Sebastiano Panichella, Venera Arnaoudova, Massimiliano Di Penta, and Giuliano Antoniol. 2015 · 2015
Earlier work this paper cites.
Tricorder: Building a program analysis ecosystem. In
Caitlin Sadowski, Jeffrey Van Gogh, Ciera Jaspan, Emma Söderberg, and Collin Winter. 2015 · 2015
Earlier work this paper cites.
Analyzing the state of static analysis: A large-scale evaluation in open source software
Moritz Beller, Radjino Bholanath, Shane McIntosh, and Andy Zaidman. 2016 · 2016
Earlier work this paper cites.
What developers want and need from program analysis: an empirical study. In
Maria Christakis and Christian Bird. 2016 · 2016
Earlier work this paper cites.
A security perspective on code review: The case of chromium. In
Marco Di Biase, Magiel Bruntink, and Alberto Bacchelli. 2016 · 2016
Cited alongside, same era.
Survey of approaches for handling static analysis alarms. In
Tukaram Muske and Alexander Serebrenik. 2016 · 2016
Cited alongside, same era.
NVD - CVE-2017-12997
2017a · 2017
Cited alongside, same era.
NVD - CVE-2017-13040
2017b · 2017
Cited alongside, same era.
NVD - CVE-2017-13083
2017c · 2017
Cited alongside, same era.
Evaluating state-of-the-art free and open source static analysis tools against buffer errors in android apps. In
Bushra Aloraini and Meiyappan Nagappan. 2017 · 2017
Cited alongside, same era.
Predicting Defective Lines Using a Model-Agnostic Technique
Supatsara Wattanakriengkrai, Patanamon Thongtanunam, Chakkrit Tantithamthavorn, Hideaki Hata, and Kenichi Matsumoto. 2022 · 2020
Later among the works it cites.
Standard LGTM queries for C/C++
2021 · 2021
Later among the works it cites.
Why don’t developers detect improper input validation? ’; DROP TABLE Papers; -. In
Larissa Braz, Enrico Fregnan, Gul Calikli, and Alberto Bacchelli. 2021 · 2021
Later among the works it cites.
FuzzBench: An open fuzzer benchmarking platform and service. In
Jonathan Metzman, László Szekeres, Laurent Simon, Read Sprabery, and Abhishek Arya. 2021 · 2021
Later among the works it cites.
Evaluating SZZ implementations through a developer-informed oracle. In
Giovanni Rosa, Luca Pascarella, Simone Scalabrino, Rosalia Tufano, Gabriele Bavota, Michele Lanza, and Rocco Oliveto. 2021 · 2021
Later among the works it cites.
Clang-Tidy Checkers
2022 · 2022
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Paulo Nunes, Ibéria Medeiros, José Fonseca, Nuno Neves, Miguel Correia, and Marco Vieira. 2017 · 2017
Cited alongside, same era.
Evaluating how static analysis tools can reduce code review effort. In
Devarshi Singh, Varun Ramachandra Sekar, Kathryn T. Stolee, and Brittany Johnson. 2017 · 2017
Cited alongside, same era.
A large-scale study of modern code review and security in open source projects. In
Christopher Thompson and David Wagner. 2017 · 2017
Cited alongside, same era.
NVD - CVE-2018-17294
2018a · 2018
Cited alongside, same era.
NVD - CVE-2018-7186
2018b · 2018
Cited alongside, same era.
NVD - CVE-2018-7485
2018c · 2018
Cited alongside, same era.
Later among the works it cites.
Software Security during Modern Code Review: The Developer’s Perspective. In
Larissa Braz and Alberto Bacchelli. 2022 · 2022
Later among the works it cites.
Where Should i Look at? Recommending Lines that Reviewers Should Pay Attention to. In
Yang Hong, Chakkrit Kla Tantithamthavorn, and Patanamon Pick Thongtanunam. 2022 · 2022
Later among the works it cites.
The Secret Life of Software Vulnerabilities: A Large-Scale Empirical Study
Emanuele Iannone, Roberta Guadagni, Filomena Ferrucci, Andrea De Lucia, and Fabio Palomba. 2022 · 2022
Later among the works it cites.
Mining Code Review Data to Understand Waiting Times Between Acceptance and Merging: An Empirical Analysis
Gunnar Kudrjavets, Aditya Kumar, Nachiappan Nagappan, and Ayushi Rastogi. 2022 · 2022
Later among the works it cites.
An empirical study on the effectiveness of static C code analyzers for vulnerability detection. In
Stephan Lipp, Sebastian Banescu, and Alexander Pretschner. 2022 · 2022
Later among the works it cites.
Can static analysis tools find more defects?
Sahar Mehrpour and Thomas D. LaToza. 2022 · 2022
Later among the works it cites.
A large-scale study of usability criteria addressed by static analysis tools. In
Marcus Nachtigall, Michael Schlichtig, and Eric Bodden. 2022 · 2022
Later among the works it cites.
Exploring the Shift in Security Responsibility
Charles Weir, Sammy Migues, and Laurie Williams. 2022 · 2022
Later among the works it cites.
Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java. In
Kaixuan Li, Sen Chen, Lingling Fan, Ruitao Feng, Han Liu, Chengwei Liu, Yang Liu, and Yixiang Chen. 2023 · 2023
Later among the works it cites.
Are automated static analysis tools worth it? An investigation into relative warning density and external software quality on the example of Apache open source projects
Alexander Trautsch, Steffen Herbold, and Jens Grabowski. 2023 · 2023
Later among the works it cites.
Zhilong Wang, Lan Zhang, Chen Cao, and Peng Liu. 2023 · 2023
Later among the works it cites.