Title :
Comparison of Static Code Analysis Tools
Author :
Mantere, Matti ; Uusitalo, Ilkka ; Röning, Juha
Author_Institution :
VTT Tech. Res. Centre of Finland, Oulu, Finland
Abstract :
In this paper we compare three static code analysis tools. The tools represent three different approaches in the field of static analysis: fortify SCA is a non-annotation based heuristic analyzer, Splint represents an annotation based heuristic analyzer, and Frama-C an annotation based correct analyzer. The tools are compared by analysing their performance when checking a demonstration code with intentionally implemented errors.
Keywords :
program diagnostics; security of data; software quality; software tools; Frama-C; information security; nonannotation based heuristic analyzer; software quality; static code analysis tools; Application software; Computer bugs; Computer errors; Failure analysis; Humans; Information analysis; Information security; Open source software; Performance analysis; Software quality;
Conference_Titel :
Emerging Security Information, Systems and Technologies, 2009. SECURWARE '09. Third International Conference on
Conference_Location :
Athens, Glyfada
Print_ISBN :
978-0-7695-3668-2
DOI :
10.1109/SECURWARE.2009.10
