A model building process for identifying actionable static analysis alerts

Proceedings - 2nd International Conference on Software Testing, Verification, and Validation, ICST 2009

Volumn , Issue , 2009, Pages 161-170

  Heckman, Sarah ^a   Williams, Laurie ^a  

^a NORTH CAROLINA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BEST MODEL; BUILDING PROCESS; FALSE POSITIVE; FIELD FAILURE; MACHINE LEARNING ALGORITHMS; MACHINE LEARNING TECHNIQUES; OPEN SOURCE PROJECTS; POTENTIAL SOURCES; SOFTWARE PROCESS;

COMPUTER SOFTWARE SELECTION AND EVALUATION; MODEL BUILDINGS; ROBOT LEARNING; SOFTWARE TESTING; STATIC ANALYSIS; VERIFICATION;

LEARNING ALGORITHMS;

EID: 67650098688     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICST.2009.45     Document Type: Conference Paper

References (20)

1. E. Arisholm, L. C. Briand, and M. Fuglerud, "Data Mining Techniques for Building Fault-proneness Models in Telecom Java Software," 18th IEEE International Symposium on Software Reliability Engineering, Trollhattan, Sweden, November 5-9, 2007, pp. 215-224.
2. N. Ayewah, D. Hovemeyer, J. D. Morgenthaler, J. Penix, and W. Pugh, "Using Static Analysis to Find Bugs," in IEEE Software. vol. 25, no. 5, 2008, pp. 22-29.
3. N. Ayewah, W. Pugh, J. D. Morgenthaler, J. Penix, and Y. Zhou, "Evaluating Static Analysis Defect Warnings On Production Software," 7th ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering, San Diego, CA, USA, June 13-14, 2007, pp. 1-8.
4. R. M. Bell, T. J. Ostrand, and E. J. Weyuker, "Looking for Bugs in All the Right Places," International Symposium on Software Testing and Analysis, 2006, pp. 61-71. (Pubitemid 46645519)
5. Y. Brun and M. D. Ernst, "Finding Latent Code Errors via Machine Learning Over Program Executions," 26th International Conference on Software Engineering, Edinburgh, Scotland, May 26-28, 2004, pp. 480-490.
6. S. Heckman and L. Williams, "A Measurement Framework of Alert Characteristics for False Positive Mitigation Models," North Carolina State University TR-2008-23, October 6, 2008.
7. S. Heckman and L. Williams, "On Establishing a Benchmark for Evaluating Static Analysis Alert Prioritization and Classification Techniques," 2nd International Symposium on Empirical Software Engineering and Measurement, Kaiserslautern, Germany, October 9-10, 2008, pp. 41-50.
8. S. S. Heckman, "Adaptively Ranking Alerts Generated from Automated Static Analysis," in ACM Crossroads. vol. 14, no. 1, 2007, pp. 16-20.
9. D. Hovemeyer and W. Pugh, "Finding Bugs is Easy," 19th ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications, Vancouver, British Columbia, Canada, October 24-28, 2004, pp. 132-136.
10. S. Kim and M. D. Ernst, "Prioritizing Warning Categories by Analyzing Software History," International Workshop on Mining Software Repositories, Minneapolis, MN, USA, May 19-20, 2007, p. 27.
11. S. Kim and M. D. Ernst, "Which Warnings Should I Fix First?," 6th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, Dubrovnik, Croatia, September 3-7, 2007, pp. 45-54.
12. T. Kremenek, K. Ashcraft, J. Yang, and D. Engler, "Correlation Exploitation in Error Ranking," 12th ACM SIGSOFT International Symposium on Foundations of Software Engineering, Newport Beach, CA, USA, 2004, pp. 83-93. (Pubitemid 40787570)
13. T. Kremenek and D. Engler, "Z-Ranking: Using Statistical Analysis to Counter the Impact of Static Analysis Approximations," 10th International Static Analysis Symposium, San Diego, California, 2003, pp. 295-315.
14. N. Nagappan, T. Ball, and A. Zeller, "Mining Metrics to Predict Component Failures," 28th International Conference on Software Engineering, Shanghai, China, May 20-28, 2006, pp. 452-461. (Pubitemid 46600942)
15. T. J. Ostrand, E. J. Weyuker, and R. M. Bell, "Where the Bugs Are," International Symposium on Software Testing and Analysis, 2004, pp. 86-96. (Pubitemid 41121380)
16. R. S. Pressman, Software Engineering: A Practitioner's Approach, 6th ed. Boston: McGraw Hill, 2005.
17. J. R. Ruthruff, J. Penix, J. D. Morgenthaler, S. Elbaum, and G. Rothermel, "Predicting Accurate and Actionable Static Analysis Warnings: An Experimental Approach," 30th International Conference on Software Engineering, Leipzig, Germany, May 10-18, 2008, pp. 341-350.
18. Q. Song, M. Shepperd, M. Cartwright, and C. Mair, "Software Defect Association Mining and Defect Correction Effort Prediction," IEEE Transactions on Software Engineering, vol. 32, no. 2, pp. 69-82, February, 2006. (Pubitemid 43323904)
19. C. C. Williams and J. K. Hollingsworth, "Automatic Mining of Source Code Repositories to Improve Bug Finding Techniques," IEEE Transactions on Software Engineering, vol. 31, no. 6, pp. 466-480, 2005. (Pubitemid 41245069)
20. I. H. Witten and E. Frank, Data Mining: Practical Machine Learning Tools and Techniques, 2nd ed. Amsterdam: Morgan Kaufmann, 2005.