Vadim Okun, William F. Guthrie, Romain Gaucher, and Paul E. Black, Effect of Static Analysis Tools on Software Security: Preliminary Investigation, Third Workshop on Quality of Protection (QoP), 2007.

Abstract:
    Static analysis tools can handle large-scale software and find thousands of defects. But do they improve software security?
    We evaluate the effect of static analysis tool use on software security in open source projects. We measure security by vulnerability reports in the National Vulnerability Database.

Get the paper in PDF (217k).

This page's URL is /~black/Papers/saToolEffectQoP07.html

Updated Wed Nov 28 13:34:52 2007

by Paul E. Black  (paul.black@nist.gov)

Go to Black's papers or NIST home page.