Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java-Reference-Cited by-同舟云学术

Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java

Published:2023-11-30 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
language:
Short-container-title:

Author:

Li Kaixuan¹,Chen Sen²,Fan Lingling³,Feng Ruitao⁴,Liu Han¹,Liu Chengwei⁵,Liu Yang⁵,Chen Yixiang¹

Affiliation:

1. East China Normal University, Shanghai, China

2. Tianjin University, Tianjin, China

3. Nankai University, Tianjin, China

4. University of New South Wales, Sydney, Australia

5. Nanyang Technological University, Singapore, Singapore

Funder

the National Key R&D Program of China

National Research Foundation, Singapore, and the Cyber Security Agency under its National Cyber- security R&D Programme

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3611643.3616262

Reference107 articles.

1. An empirical study of security warnings from static application security testing tools

2. Detecting security vulnerabilities with static analysis – A case study

3. Apache. 2023. Home - Apache Qpid. https://qpid.apache.org/index.html (Accessed on 31/01/2023) Apache. 2023. Home - Apache Qpid. https://qpid.apache.org/index.html (Accessed on 31/01/2023)

4. Christel Baier and Joost-Pieter Katoen . 2008. Principles of model checking . MIT press . Christel Baier and Joost-Pieter Katoen. 2008. Principles of model checking. MIT press.

5. Sindre Beba and Magnus Melseth Karlsen. 2019. Implementation analysis of open-source Static analysis tools for detecting security vulnerabilities. Master’s thesis. NTNU. Sindre Beba and Magnus Melseth Karlsen. 2019. Implementation analysis of open-source Static analysis tools for detecting security vulnerabilities. Master’s thesis. NTNU.

Cited by 4 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. An Empirical Study of Static Analysis Tools for Secure Code Review;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11

2. Silent Taint-Style Vulnerability Fixes Identification;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11

3. Security Evaluation of Companion Android Applications in IoT: The Case of Smart Security Devices;Sensors;2024-08-23

4. Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers;2024 IEEE Security and Privacy Workshops (SPW);2024-05-23