Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 13 of 13 for “"static analysis tools"”.
-
Helping Student Programmers Identify and Fix Bugs Using Static Analysis Tools
Static analysis tools can be used to help programmers identify problems in their code. However, these tools often assume that developers have some programming background knowledge, so they can be hard to use in an educational context. We investigated the most common FindBugs errors from student …
-
Beyond rules: how Large Language Models are redefining cryptographic misuse detection
… a comprehensive comparison between traditional static analysis tools for cryptographic API misuse detection—CryptoGuard, CogniCrypt, and Snyk Code—and the LLMs—GPT, Llama, Claude, and Gemini. Using benchmark datasets (OWASP, CryptoAPI, and MASC), we evaluate the effectiveness of each tool in …
-
Automated Bug Severity Prediction using Source Code Metrics, Static Analysis, and Code Representation
… common source code metrics, and also two popular static analysis tools (SpotBugs and Infer) for analyzing their capability in predicting defects and their severity. We studied 3,358 buggy methods with different severity labels from 19 Java open-source projects. Results show that although code …
-
Analysis and Transformation of Configurable Systems
Static analysis tools and transformation engines for source code belong to the standard equipment of a software developer. Their use simplifies a developer's everyday work of maintaining and evolving software systems significantly and, hence, accounts for much of a developer's programming …
-
Funqual: User-Defined, Statically-Checked Call Graph Constraints in C++
<p>Static analysis tools can aid programmers by reporting potential programming mistakes prior to the execution of a program. Funqual is a static analysis tool that reads C++17 code ``in the wild'' and checks that the function call graph follows a set of rules which can be defined by the user. This …
-
Finding security bugs in web applications using domain-specific static analysis
… of web application implementations, allowing analysis of even the largest real-world applications. In contrast to existing general-purpose verification approaches, this work was inspired by the hypothesis that narrowing our focus might produce more effective tools. Our approach has been to …
-
Augmenting large language models with static code analysis for accelerated software development and quality improvements
… of the software development lifecycle using static analysis tools. NGQA integrates detection, grounding, revision, validation, and coordination into a unified workflow through a verification-aware artificial intelligence (AI) agent architecture. The pipeline consists of six steps that combine …
-
Analysing Student Code Submissions Using Program Analysis Techniques and Large Language Models
… struggle to interpret technical diagnostics from static analysis tools, while large language models provide accessible explanations but lack formal guarantees. This thesis investigates when static analysis grounding—that is, providing the model with structured tool output (such as compiler …
-
Securing software : an evaluation of static source code analyzers
This thesis evaluated five static analysis tools--Polyspace C Verifier, ARCHER, BOON, Splint, and UNO--using 14 code examples that illustrated actual buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case with one or more …
-
Hybrid Testing: Combining Static Analysis and Directed Fuzzing
… in vulnerabilities. Existing automated testing tools such as fuzzing are limited in scope or in the case of static analysis, have a high false positive rate. Without improved automated testing, it can be challenging for developers to debug large, complex codebases. In this paper, Hybrid Testing …
-
Torpedo: A Fuzzing Framework for Discovering Adversarial Container Workloads
… these vulnerabilities through traditional static analysis tools may be very challenging. In this work, we present TORPEDO, a set of modifications to the SYZKALLER fuzzing framework that creates containerized workloads and searches for sequences of system calls that break process isolation …
-
From Theory to Practice: Deployment-grade Tools and Methodologies for Software Security
… by accidental human errors. Automatic screening tools have great potentials to reduce the gap between the theory and the practice. However, the goal of scalable automated code screening is largely hindered by the practical difficulty of reducing false positives without compromising analysis …
-
Methodology Development for Improving the Performance of Critical Classification Applications
… prognosis. Cryptographic vulnerability tools are used to detect misuses of Java cryptographic APIs and thus classify secure and insecure parts of code. These detection tools are critical applications as misuse of cryptographic libraries and APIs causes devastating security and privacy …