Comparing bug finding tools with reviews and tests

Lecture Notes in Computer Science

Volumn 3502, Issue , 2005, Pages 40-55

  Wagner, Stefan ^a   Jürjens, Jan ^a   Koller, Claudia ^a   Trischberger, Peter ^b  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

^b O2 (Germany) GmbH and Co OHG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATION; CODES (SYMBOLS); PROJECT MANAGEMENT; TESTING; STATIC ANALYSIS;

AUTOMATIC STATIC ANALYSIS; BUG FINDING TOOLS; REVIEW ACTIVITIES; SOURCE CODES; FALSE POSITIVE; INDUSTRIAL ENVIRONMENTS; SOFTWARE SOURCE CODES; TIME SPENT;

COMPUTER AIDED SOFTWARE ENGINEERING; DEFECTS;

EID: 24944501226     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11430230_4     Document Type: Conference Paper

References (22)

1. T. Ball and S.K. Rajamani. The SLAM Project: Debugging System Software via Static Analysis. In Proc. 29th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, 2002.
2. B. Beizer. Software Testing Techniques. Thomson Learning, 2nd edition, 1990.
3. W.R. Bush, J.D. Pincus, and D.J. Sielaff. A static analyzer for finding dynamic programming errors. Softw. Pract. Exper., 30:775-802, 2000.
4. R. Chillarege. Orthogonal Defect Classification. In Michael R. Lyu, editor, Handbook of Software Reliability Engineering, chapter 9. IEEE Computer Society Press and McGraw-Hill, 1996.
5. C. Csallner and Y. Smaragdakis. CnC: Combining Static Checking and Testing. In Proc. 27th International Conference on Software Engineering (ICSE'05), 2005. To appear.
6. D. Engler and M. Musuvathi. Static Analysis versus Model Checking for Bug Finding. In Proc. Verification, Model Checking and Abstract Interpretation (VMCAI'04), volume 2937 of LNCS, pages 191-210. Springer, 2002.
7. C. Flanagan, K.R.M. Leino, M. Lillibridge, G. Nelson, J.B. Saxe, and R. Stata. Extended Static Checking for Java. In Proc. 2002 ACM SIGPLAN Conference on Programming Language Design and Implementation, 2002.
8. D. Hovemeyer and W. Pugh. Finding Bugs is Easy. SIGPLAN Notices, 39(12), 2004. To appear.
9. IEEE. IEEE Standard Classification for Software Anomalies, 1993. IEEE Std 1044-1993.
10. R. Johnson and D. Wagner. Finding User/Kernel Pointer Bugs With Type Inference. In Proc. 13th USENIX Security Symposium, 2004.
11. C. Jones. Applied Software Measurement: Assuring Productivity and Quality. McGraw-Hill, 1991.
12. C. Koller. Vergleich verschiedener Methoden zur analytischen Qualitätssicherung. Diploma Thesis, Technische Universität München, 2004. In German.
13. G.J. Myers. The Art of Software Testing. John Wiley & Sons, 1979.
14. J. Palsberg. Type-Based Analysis and Applications. In Proc. 2001 ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE'01), pages 20-27. ACM Press, 2001.
15. PMD. http://pmd.sourceforge.net (February 2005).
16. A. Pretschner, W. Prenninger, S. Wagner, C. Kühnel, M. Baumgartner, B. Sostawa, R. Zölch, and T. Stauner. One Evaluation of Model-Based Testing and its Automation. In Proc. 27th International Conference on Software Engineering (ICSE'05), 2005. To appear.
17. QJ Pro. http://qjpro.sourceforge.net (February 2005).
18. N. Rutar, C.B. Almazan, and J.S. Foster. A Comparison of Bug Finding Tools for Java. In Proc. 15th IEEE International Symposium on Software Reliability Engineering (ISSRE'04), pages 245-256, 2004.
19. S. Wagner. Efficiency Analysis of Defect-Detection Techniques. Technical Report TUMI-0413, Institut für Informatik, Technische Universität München, 2004.
20. S. Wagner. Reliability Efficiency of Defect-Detection Techniques: A Field Study. In Suppl. Proc. 15th IEEE International Symposium on Software Reliability Engineering (ISSRE'04), pages 294-301, 2004.
21. S. Wagner. Towards Software Quality Economics for Defect-Detection Techniques. In Proc. 29th Annual IEEE/NASA Software Engineering Workshop, 2005. To appear.
22. M. Zitser, R. Lippmann, and T .Leek. Testing Static Analysis Tools using Exploitable Buffer Overflows from Open Source Code. In Proc. 12th ACM SIGSOFT International Symposium on Foundations of Software Engineering (SIGSOFT'04/FSE-12), pages 97-106. ACM Press, 2004.