static analysis Archives - Page 3 of 9

Closing the Barn Door – Software Security

Posted on October 23, 2014 by Code Curmudgeon

In the second part of my series on what we can do to contain and combat the recent rash of security breaches I’d like...

What Does Static Analysis Have To Do With DevOps

Posted on October 14, 2014 by Code Curmudgeon

DevOps is a movement that recognizes how tightly coupled development is to operations in modern applications. With shortened lifecycles and increasing amounts of software,...

Better Software Conference West

Posted on June 3, 2014 by Code Curmudgeon

I’m heading to the Better Software Conference West in Las Vegas tomorrow. If you want to make your software better, this is the place...

Getting the Most out of Static Analysis Tutorial at ICSQ

Posted on February 7, 2014 by Code Curmudgeon

The International conference on software quality starts on February 24th in Texas, and I’ll be giving a tutorial session there. In addition to the...

‹ Prev 1 2 3 4 5 … 9 Next ›

Definitioner

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
flow analysis: A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.
Development Testing: Development Testing is a software development process that involves practices such as static analysis, data flow analysis, metrics, peer code review, unit testing, code coverage and other steps that can be performed at development time. The goal is not to replace traditional QA, but to reduce time and cost by catching problems earlier.
pattern-based analysis: A form of static analysis where patterns of either good or bad code are stored as rules and compared against a code base without executing the code, to find potential violations.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.