Test-Driving Static Analysis Tools in Search of C Code Vulnerabilities II

2014 ◽  
pp. 486-488 ◽  
Author(s):  
George Chatzieleftheriou ◽  
Apostolos Chatzopoulos ◽  
Panagiotis Katsaros
Keyword(s):  
Static Analysis ◽  
Analysis Tools

scholarly journals Hypervisor-assisted dynamic malware analysis

Cybersecurity ◽  
2021 ◽  
Vol 4 (1) ◽  
Author(s):  
Roee S. Leon ◽  
Michael Kiperberg ◽  
Anat Anatey Leon Zabag ◽  
Nezer Jacob Zaidenberg
Keyword(s):  
Dynamic Analysis ◽  
Static Analysis ◽  
Cyber Security ◽  
Malware Analysis ◽  
Analysis Tools ◽  
Significant Performance

AbstractMalware analysis is a task of utmost importance in cyber-security. Two approaches exist for malware analysis: static and dynamic. Modern malware uses an abundance of techniques to evade both dynamic and static analysis tools. Current dynamic analysis solutions either make modifications to the running malware or use a higher privilege component that does the actual analysis. The former can be easily detected by sophisticated malware while the latter often induces a significant performance overhead. We propose a method that performs malware analysis within the context of the OS itself. Furthermore, the analysis component is camouflaged by a hypervisor, which makes it completely transparent to the running OS and its applications. The evaluation of the system’s efficiency suggests that the induced performance overhead is negligible.

scholarly journals Security Notifications in Static Analysis Tools: Developers’ Attitudes, Comprehension, and Ability to Act on Them

2021 ◽  
Author(s):  
Mohammad Tahaei ◽  
Kami Vaniea ◽  
Konstantin (Kosta) Beznosov ◽  
Maria K Wolters
Keyword(s):  
Static Analysis ◽  
Analysis Tools ◽  
Ability To Act

Static analysis tools for security checking in code at Motorola

2008 ◽  
Vol XXVIII (1) ◽  
pp. 76-82 ◽  
Author(s):  
R Krishnan ◽  
Margaret Nadworny ◽  
Nishil Bharill
Keyword(s):  
Static Analysis ◽  
Analysis Tools

Why don't software developers use static analysis tools to find bugs?

2013 ◽  
Author(s):  
Brittany Johnson ◽  
Yoonki Song ◽  
Emerson Murphy-Hill ◽  
Robert Bowdidge
Keyword(s):  
Static Analysis ◽  
Software Developers ◽  
Analysis Tools

An empirical study on combining diverse static analysis tools for web security vulnerabilities based on development scenarios

Computing ◽  
2018 ◽  
Vol 101 (2) ◽  
pp. 161-185 ◽  
Author(s):  
Paulo Nunes ◽  
Ibéria Medeiros ◽  
José Fonseca ◽  
Nuno Neves ◽  
Miguel Correia ◽  
...  
Keyword(s):  
Empirical Study ◽  
Static Analysis ◽  
Web Security ◽  
Security Vulnerabilities ◽  
Development Scenarios ◽  
Analysis Tools

scholarly journals Evaluation of SQL Injection Vulnerability Detection Tools

2019 ◽  
Vol 9 (1) ◽  
pp. 1747-1751
Keyword(s):  
Static Analysis ◽  
Web Applications ◽  
Source Code ◽  
False Negative ◽  
Vulnerability Detection ◽  
Sql Injection ◽  
User Input ◽  
Root Cause ◽  
Analysis Tools ◽  
Free Open Source

SQL injection vulnerabilities have been predominant on database-driven web applications since almost one decade. Exploiting such vulnerabilities enables attackers to gain unauthorized access to the back-end databases by altering the original SQL statements through manipulating user input. Testing web applications for identifying SQL injection vulnerabilities before deployment is essential to get rid of them. However, checking such vulnerabilities by hand is very tedious, difficult, and time-consuming. Web vulnerability static analysis tools are software tools for automatically identifying the root cause of SQL injection vulnerabilities in web applications source code. In this paper, we test and evaluate three free/open source static analysis tools using eight web applications with numerous known vulnerabilities, primarily for false negative rates. The evaluation results were compared and analysed, and they indicate a need to improve the tools.

Learning a Classifier for Prediction of Maintainability Based on Static Analysis Tools

2019 ◽  
Author(s):  
Markus Schnappinger ◽  
Mohd Hafeez Osman ◽  
Alexander Pretschner ◽  
Arnaud Fietzke
Keyword(s):  
Static Analysis ◽  
Analysis Tools

A Novel Memory Leak Classification for Evaluating the Applicability of Static Analysis Tools

2018 ◽  
Author(s):  
Sen Zhang ◽  
Jingwen Zhu ◽  
Ao Liu ◽  
Weijing Wang ◽  
Chenkai Guo ◽  
...  
Keyword(s):  
Static Analysis ◽  
Memory Leak ◽  
Analysis Tools
Sign in / Sign up

Export Citation Format

Share Document