Mitigating false positive static analysis warnings: Progress, challenges, and opportunities

Z Guo, T Tan, S Liu, X Liu, W Lai, Y Yang… - IEEE Transactions …, 2023 - ieeexplore.ieee.org
Static analysis (SA) tools can generate useful static warnings to reveal the problematic code
snippets in a software system without dynamically executing the corresponding source code …

Skipanalyzer: An embodied agent for code analysis with large language models

MM Mohajer, R Aleithan, NS Harzevili, M Wei… - arXiv preprint arXiv …, 2023 - arxiv.org
We introduce SkipAnalyzer, the first large language model (LLM)-powered embodied agent
for static code analysis. It can detect bugs, filter false positive warnings, and patch the …

Sorald: Automatic patch suggestions for sonarqube static analysis violations

K Etemadi, N Harrand, S Larsén… - … on Dependable and …, 2022 - ieeexplore.ieee.org
Previous work has shown that early resolution of issues detected by static code analyzers
can prevent major costs later on. However, developers often ignore such issues for two main …

How to find actionable static analysis warnings: A case study with FindBugs

R Yedida, HJ Kang, H Tu, X Yang, D Lo… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
Automatically generated static code warnings suffer from a large number of false alarms.
Hence, developers only take action on a small percent of those warnings. To better predict …

Effectiveness of ChatGPT for Static Analysis: How Far Are We?

MM Mohajer, R Aleithan, NS Harzevili, M Wei… - Proceedings of the 1st …, 2024 - dl.acm.org
This paper conducted a novel study to explore the capabilities of ChatGPT, a state-of-the-art
LLM, in static analysis tasks such as static bug detection and false positive warning removal …

An Evaluation of General-Purpose Static Analysis Tools on C/C++ Test Code

J Malm, E Enoiu, MA Naser, B Lisper… - 2022 48th Euromicro …, 2022 - ieeexplore.ieee.org
In recent years, maintaining test code quality has gained more attention due to increased
automation and the growing focus on issues caused during this process. Test code may …

[PDF][PDF] How to find actionable static analysis warnings: A case study with FindBugs.(2023)

R YEDIDA, HJ KANG, H TU, X YANG, D LO… - IEEE Transactions on … - ink.library.smu.edu.sg
Automatically generated static code warnings suffer from a large number of false alarms.
Hence, developers only take action on a small percent of those warnings. To better predict …

[PDF][PDF] Combinatorial Method with Static Analysis for Source Code Security in Web Applications

JRB Higuera, JB Higuera, JAS Montalvo… - … in Engineering & …, 2021 - cdn.techscience.cn
Security weaknesses in web applications deployed in cloud architectures can seriously
affect its data confidentiality and integrity. The construction of the procedure utilized in the …