static analysis Archives - Page 8 of 9

False Positives and Other Misconceptions in Static Analysis

In ongoing discussions here at the blog and elsewhere, I keep seeing the topic of false positives in static analysis come up. It’s certainly...

I’ve gotten a lot of interesting feedback on the What Went Wrong with Static Analysis? post. So many people had their ideas about what...

As I talk to people about static analysis, I get a lot of questions and it seems that static analysis means different things to...

As part of my ongoing series about Static Analysis issues I want to talk about the relationship between the traditional static method and the...

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
flow analysis: A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.
BASIC: Beginners All Purpose Symbolic Instruction Code. A programming language designed specifically for beginners.
pattern-based analysis: A form of static analysis where patterns of either good or bad code are stored as rules and compared against a code base without executing the code, to find potential violations.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.