An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing-Reference-Cited by-同舟云学术

An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing

Published:2021-10-11 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 15th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)
language:
Short-container-title:

Author:

Croft Roland¹,Newlands Dominic²,Chen Ziyu³,Babar M. Ali¹

Affiliation:

1. University of Adelaide, Cyber Security Cooperative, Research Centre

2. University of Adelaide

3. Monash University

Funder

Cyber Security Cooperative Research Centre

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3475716.3475781

Reference68 articles.

1. An empirical study of security warnings from static application security testing tools

2. Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Source Software

3. Juliet 1.1 C/C++ and Java test suite;Boland Tim;IEEE Computer Architecture Letters,2012

4. CERN. [n.d.]. Rough Auditing Tool for Security (RATS). https://security.web.cern.ch/recommendations/en/codetools/rats.shtml CERN. [n.d.]. Rough Auditing Tool for Security (RATS). https://security.web.cern.ch/recommendations/en/codetools/rats.shtml

Cited by 27 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Evaluating C/C++ Vulnerability Detectability of Query-Based Static Application Security Testing Tools;IEEE Transactions on Dependable and Secure Computing;2024-09

2. Securing tomorrow: a comprehensive survey on the synergy of Artificial Intelligence and information security;AI and Ethics;2024-07-30

3. A comprehensive analysis on software vulnerability detection datasets: trends, challenges, and road ahead;International Journal of Information Security;2024-07-23

4. SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

5. Semgrep*: Improving the Limited Performance of Static Application Security Testing (SAST) Tools;Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering;2024-06-18