Mitigating false positive static analysis warnings: Progress, challenges, and opportunities

Z Guo, T Tan, S Liu, X Liu, W Lai, Y Yang… - IEEE Transactions …, 2023 - ieeexplore.ieee.org
Static analysis (SA) tools can generate useful static warnings to reveal the problematic code
snippets in a software system without dynamically executing the corresponding source code …

Machine learning for actionable warning identification: A comprehensive survey

X Ge, C Fang, X Li, W Sun, D Wu, J Zhai, SW Lin… - ACM Computing …, 2024 - dl.acm.org
Actionable Warning Identification (AWI) plays a crucial role in improving the usability of static
code analyzers. With recent advances in Machine Learning (ML), various approaches have …

Automatically inspecting thousands of static bug warnings with large language model: How far are we?

C Wen, Y Cai, B Zhang, J Su, Z Xu, D Liu… - ACM Transactions on …, 2024 - dl.acm.org
Static analysis tools for capturing bugs and vulnerabilities in software programs are widely
employed in practice, as they have the unique advantages of high coverage and …

An empirical study of class rebalancing methods for actionable warning identification

X Ge, C Fang, T Bai, J Liu… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
Actionable warning identification (AWI) is crucial for improving the usability of static analysis
tools. Currently, machine learning (ML)-based AWI approaches are notably common, which …

[HTML][HTML] Survey of techniques to detect common weaknesses in program binaries

A Adhikari, P Kulkarni - Cyber Security and Applications, 2025 - Elsevier
Software vulnerabilities resulting from coding weaknesses and poor development practices
are common. Attackers can exploit these vulnerabilities and impact the security and privacy …

Pre-trained model-based actionable warning identification: A feasibility study

X Ge, C Fang, Q Zhang, D Wu, B Yu, Q Zheng… - arxiv preprint arxiv …, 2024 - arxiv.org
Actionable Warning Identification (AWI) plays a pivotal role in improving the usability of static
code analyzers. Currently, Machine Learning (ML)-based AWI approaches, which mainly …

An empirical assessment on merging and repositioning of static analysis alarms

N Mansoor, T Muske, A Serebrenik… - 2022 IEEE 22nd …, 2022 - ieeexplore.ieee.org
Static analysis tools generate a large number of alarms that require manual inspection. In
prior work, repositioning of alarms is proposed to (1) merge multiple similar alarms together …

AW4C: A Commit-Aware C Dataset for Actionable Warning Identification

Z Liu, M Yan, Z Gao, D Li, X Zhang… - Proceedings of the 21st …, 2024 - dl.acm.org
Excessive non-actionable warnings generated by static program analysis tools can hinder
developers from utilizing these tools effectively. Leveraging learning-based approaches for …

A Method for Processing Static Analysis Alarms Based on Deep Learning

Y Tan, J Tian - Applied Sciences, 2024 - mdpi.com
Automatic static analysis tools (ASATs), also known as static analyzers, have demonstrated
their significance and practicability in detecting software defects. ASATs assist developers to …

Unveiling the Power of Intermediate Representations for Static Analysis: A Survey

B Zhang, W Chen, HC Chiu, C Zhang - arxiv preprint arxiv:2405.12841, 2024 - arxiv.org
Static analysis techniques enhance the security, performance, and reliability of programs by
analyzing and portraiting program behaviors without the need for actual execution. In …