A systematic literature review of actionable alert identification techniques for automated static code analysis

S Heckman, L Williams - Information and Software Technology, 2011 - Elsevier
CONTEXT: Automated static analysis (ASA) identifies potential source code anomalies early
in the software development lifecycle that could lead to field failures. Excessive alert …

A model building process for identifying actionable static analysis alerts

S Heckman, L Williams - 2009 International conference on …, 2009 - ieeexplore.ieee.org
Automated static analysis can identify potential source code anomalies early in the software
process that could lead to field failures. However, only a small portion of static analysis alerts …

How developers engage with static analysis tools in different contexts

C Vassallo, S Panichella, F Palomba, S Proksch… - Empirical Software …, 2020 - Springer
Automatic static analysis tools (ASATs) are instruments that support code quality
assessment by automatically detecting defects and design issues. Despite their popularity …

Finding patterns in static analysis alerts: improving actionable alert ranking

Q Hanam, L Tan, R Holmes, P Lam - … of the 11th working conference on …, 2014 - dl.acm.org
Static analysis (SA) tools that find bugs by inferring programmer beliefs (eg, FindBugs) are
commonplace in today's software industry. While they find a large number of actual defects …

Challenges with responding to static analysis tool alerts

N Imtiaz, A Rahman, E Farhana… - 2019 IEEE/ACM 16th …, 2019 - ieeexplore.ieee.org
Static analysis tool alerts can help developers detect potential defects in the code early in
the development cycle. However, developers are not always able to respond to the alerts …

On establishing a benchmark for evaluating static analysis alert prioritization and classification techniques

S Heckman, L Williams - Proceedings of the Second ACM-IEEE …, 2008 - dl.acm.org
Benchmarks provide an experimental basis for evaluating software engineering processes
or techniques in an objective and repeatable manner. We present the FAULTBENCH v0. 1 …

Context is king: The developer perspective on the usage of static analysis tools

C Vassallo, S Panichella, F Palomba… - 2018 IEEE 25th …, 2018 - ieeexplore.ieee.org
Automatic static analysis tools (ASATs) are tools that support automatic code quality
evaluation of software systems with the aim of (i) avoiding and/or removing bugs and (ii) …

Analyzing the state of static analysis: A large-scale evaluation in open source software

M Beller, R Bholanath, S McIntosh… - 2016 IEEE 23rd …, 2016 - ieeexplore.ieee.org
The use of automatic static analysis has been a software engineering best practice for
decades. However, we still do not know a lot about its use in real-world software projects …

Adaptively ranking alerts generated from automated static analysis

SS Heckman - XRDS: Crossroads, The ACM Magazine for Students, 2007 - dl.acm.org
Static analysis tools are useful for finding common programming mistakes that often lead to
field failures. However, static analysis tools regularly generate a high number of false …

[HTML][HTML] A longitudinal study of static analysis warning evolution and the effects of PMD on software quality in apache open source projects

A Trautsch, S Herbold, J Grabowski - Empirical Software Engineering, 2020 - Springer
Automated static analysis tools (ASATs) have become a major part of the software
development workflow. Acting on the generated warnings, ie, changing the code indicated in …