A report on a survey and study of static analysis users

DEFECTS'08: 2008 International Symposium on Software Testing and Analysis - Proceedings of the 2008 Workshop on Defects in Large Software Systems 2008, DEFECTS'08

Volumn , Issue , 2008, Pages 1-5

  Ayewah, Nathaniel ^a   Pugh, William ^a  

^a Institute of Advanced Computer Science   (United States)

Author keywords

Bug patterns; Bugs; False positives; Findbugs; Java; Software defects; Software quality; Static analysis

Indexed keywords

BUG PATTERNS; BUGS; FALSE POSITIVES; FINDBUGS; JAVA; SOFTWARE DEFECTS; SOFTWARE QUALITY;

COMPUTER SOFTWARE; COMPUTER SOFTWARE SELECTION AND EVALUATION; DEFECTS; PROGRAM DEBUGGING; SOFTWARE ENGINEERING; SOFTWARE TESTING; STATIC ANALYSIS; SURVEYS; TECHNICAL PRESENTATIONS;

QUALITY CONTROL;

EID: 57349170943     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1390817.1390819     Document Type: Conference Paper

References (14)

1. Dspace. http://dspace.org/, 2008.
2. Fortify software, http://fortify.com/, 2008.
3. Hackystat. http://hackystat.org, 2008.
4. Static analysis tool exposition, organized by software assurance metrics and tool evaluation (samate) project at nist. http://samate.nist.gov/index.php/ SATE, 2008.
5. Survey monkey, http://surveymonkey.com/, 2008.
6. N. Ayewah, D. Hovemeyer, J. D. Morgenthaler, J. Penix, and W. Pugh. Experiences using static analysis to find bugs. Software, IEEE, 25(5), 2008. To appear.
7. N. Ayewah, W. Pugh, J. D. Morgenthaler, J. Penix, and Y. Zhou. Evaluating static analysis defect warnings on production software. In PASTE '07: Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, pages 1-8, New York, USA, 2007. ACM.
8. D. Hovemeyer and W. Pugh. Finding more null pointer bugs, but not too many. In PASTE '07: Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, pages 9-14, New York, USA, 2007. ACM.
9. D. Hovemeyer, J. Spacco, and W. Pugh. Evaluating and tuning a static analysis to find null pointer bugs. In PASTE '05: The 6th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, pages 13-19, New York, NY, USA, 2005. ACM Press.
10. C. Jaspan, I.-C. Chen, and A. Sharma. Understanding the value of program analysis tools. In Companion to the 22nd ACM SIGPLAN conference on Object oriented programming systems and applications companion, pages 963-970, Montreal, Quebec, Canada, 2007. ACM.
11. P. Johnson, H. Kou, J. Agustin, C. Chan, C. Moore, J. Miglani, S. Zhen, and W. Doane. Beyond the personal software process: Metrics collection and analysis for the differently disciplined. In Software Engineering, 2003. Proceedings. 25th International Conference on, pages 641-646, 2003.
12. L. Layman, L. Williams, and R. S. Amant. Toward reducing fault fix time: Understanding developer behavior for the design of automated fault detection tools. In Empirical Software Engineering and Measurement, 2007. ESEM 2007. First International Symposium on, pages 176-185, 2007.
13. J. Ruthruff, J. Penix, J. D. Morgenthaler, S. Elbaum, and G. Rothermel. Predicting accurate and actionable static analysis warnings: An experimental approach. In Proceedings of the International Conference on Software Engineering, 2008.
14. J. Spacco, D. Hovemeyer, and W. Pugh. Tracking defect warnings across versions. In MSR '06: Proceedings of the 2006 international workshop on Mining software repositories, pages 133-136, New York, NY, USA, 2006. ACM Press.