Главная
Study mode:
on
1
About the speaker
2
Outline of today's talk
3
What is this static analysis
4
What types of issues can static analysis find?
5
Using analyzers improves code quality & security
6
Build Kampar into a source of information about software analyzers, beginning with static tools
7
Basic information
8
Process integration
9
When & where will the analyzer run?
10
What inputs does the analyzer require?
11
Speed & scalability
12
Reporting
13
3. Coverage
14
Static analyzers have limited weakness coverage
15
5. Results quality
16
Challenges ahead
17
Make a contribution
Description:
Explore the world of static code analysis in this 40-minute OWASP Foundation conference talk. Learn about different types of static analyzers, their benefits for improving code quality and security, and how to choose the right tools based on empirical data. Discover the Kampar project, which aims to provide comprehensive information about software analyzers. Delve into key considerations such as process integration, analyzer requirements, speed, scalability, and reporting capabilities. Examine the limitations of static analyzers in terms of weakness coverage and result quality. Gain insights into future challenges and opportunities for contributing to the field of static code analysis.

Choosing the Right Static Code Analyzers Based on Hard Data

OWASP Foundation
Add to list
0:00 / 0:00