Abstract The Open Web Application Security Project (OWASP) defines Static Application
Security Testing (SAST) tools as those that can help find security vulnerabilities in the source …

Identifying software vulnerabilities is becoming more important as critical and sensitive
systems increasingly rely on complex software systems. It has been suggested in previous …

With the advancements in the field of modern science and technology, there is a growing
trend in reliance on software codes, which puts more emphasis on the quality of software …

C codebases frequently embed nonportable and unstandardized elements such as inline
assembly code. Such elements are not well understood, which poses a problem to tool …

This paper performs the first study to understand the prevalence, challenges, and
effectiveness of using Static Application Security Testing (SAST) tools on Open-Source …

Modern mobile apps incorporate rich and complex features, opening the doors for different
security concerns. Android is the dominant platform in mobile app markets, and enhancing …

In this article, we will look at the recall, precision, and usability of five open source static
analysis tools (Clang, Infer, Cppcheck, Splint and, Frama-C). Prior articles comparing the …

Mobile IPv6 (MIPv6) is a protocol to support mobility for IPv6. Fast Handovers for MIPv6
(FMIPv6) have been studied, since in MIPv6 handover latency is long, and all packets are …

3.1 Introduction For the purposes of this chapter, grace period and vulnerability lifespan are
defined as follows:• grace period is the amount of time the discoverer of a vulnerability allots …

Test oracles have become a welcoming approach as a very efficient support for testing any
type of application. Since oracle's generation can be a very laborious work, several …