How Do Developers Act on Static Analysis Alerts? An Empirical Study of Coverity Usage.
Nasif ImtiazBrendan MurphyLaurie A. WilliamsPublished in: ISSRE (2019)
Keyphrases
- static analysis
- source code
- dynamic analysis
- open source
- malicious code
- symbolic execution
- software systems
- java card
- test generation
- software development
- intrusion detection system
- data sets
- object oriented
- test suite
- abstract interpretation
- end users
- regular expressions
- software maintenance
- intrusion detection
- relational databases