Static code analysis is often used to scan source code for security vulnerabilities. Given the
wide range of existing solutions implementing different analysis techniques, it is very …

Static code analysis tools are being increasingly used to improve code quality. Such tools
can statically analyze the code to find bugs, security vulnerabilities, security spots …

Abstract Usage of Deep Learning (DL) methods is ubiquitous. It is common in the
DL/Artificial Intelligence domain to use 3rd party software. TensorFlow is one of the most …

Stack Overflow hosts millions of solutions that aim to solve developers' programming issues.
In this crowdsourced question answering process, Stack Overflow becomes a code hosting …

A common paradigm for improving fuzzing performance is to focus on selected regions of a
program rather than its entirety. While previous work has largely explored how these …

False Positive Alerts (FPA), generated by Static Analyzers Tools (SAT), reduce the
effectiveness of the automatic code review, letting them be underused in practice …

Vulnerabilities in code should be detected and patched quickly to reduce the time in which
they can be exploited. There are many automated approaches to assist developers in …

Software applications are frequently deployed with security vulnerabilities that may open the
door to attacks. In business-critical scenarios, such attacks may lead to significant financial …

Decompilers are tools designed to recover a high-level language representation (typically in
C code) from program binaries. Over the past five years, decompilers have improved …

Context: Static Application Security Testing Tools (SASTTs) identify software vulnerabilities
to support the security and reliability of software applications. Interestingly, several studies …