"False negative - that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing

The demand for automated security analysis techniques, such as static analysis based security testing (SAST) tools continues to increase. To develop SASTs that are effectively leveraged by developers for finding vulnerabilities, researchers and tool designers must understand how developers perceive,...

Ausführliche Beschreibung

Bibliographische Detailangaben

Hauptverfasser:	Ami, Amit Seal, Moran, Kevin, Poshyvanyk, Denys, Nadkarni, Adwait
Format:	Tagungsbericht
Sprache:	eng
Schlagworte:	Benchmark testing false negative false positive Industries Privacy Protocols qualitative research Reliability SAST Security software engineering software security Static analysis static analysis based security testing thematic analysis
Online-Zugang:	Volltext bestellen
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!