Learning a classifier for false positive error reports emitted by static code analysis tools

No abstract is available for this paper.

• Publication year

  2017

• Venue

  MAPL@PLDI

• Publication date

  2017-06-18

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/3088525.3088675
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Identifying and Documenting False Positive Patterns Generated by Static Code Analysis Tools

  2017cited by this paper
• Deep API learning

  2016cited by this paper
• DeepSoft: a vision for a deep model of software

  2016cited by this paper
• Deep learning code fragments for code clone detection

  2016cited by this paper
• Crowdsourcing in Software Engineering: Models, Motivations, and Challenges

  2016cited by this paper
• A Convolutional Attention Network for Extreme Summarization of Source Code

  2016cited by this paper
• Parameter-free probabilistic API mining across GitHub

  2015cited by this paper
• Visualizing and Understanding Recurrent Networks

  2015cited by this paper
• Predicting Program Properties from "Big Code"

  2015cited by this paper
• Suggesting accurate method and class names

  2015cited by this paper
• ALETHEIA: Improving the Usability of Static Security Analysis

  2014cited by this paper
• On the localness of software

  2014cited by this paper
• Code completion with statistical language models

  2014cited by this paper
• Automated Classification of Static Code Analysis Alerts: A Case Study

  2013cited by this paper
• A statistical semantic language model for source code

  2013cited by this paper
• ADADELTA: An Adaptive Learning Rate Method

  2012cited by this paper
• On the naturalness of software

  2012cited by this paper
• Test-case reduction for C compiler bugs

  2012cited by this paper
• Juliet 1.1 C/C++ and Java Test Suite

  2012cited by this paper
• Parsing Natural Scenes and Natural Language with Recursive Neural Networks

  2011cited by this paper
• Filtering false alarms of buffer overflow analysis using SMT solvers

  2010cited by this paper
• Using checklists to review static analysis warnings

  2009cited by this paper
• Using Static Analysis to Find Bugs

  2008influential reference
• Program slicing

  2008cited by this paper
• HDD: hierarchical delta debugging

  2006cited by this paper
• Open Web Application Security Project

  2006cited by this paper
• Z-Ranking: Using Statistical Analysis to Counter the Impact of Static Analysis Approximations

  2003cited by this paper
• Simplifying and Isolating Failure-Inducing Input

  2002cited by this paper
• Long Short-Term Memory

  1997cited by this paper

• How vulnerability explanations help software practitioners confirm and fix code vulnerabilities

  2026cites this paper
• Complexity-Based Code Embeddings

  2026cites this paper
• On Abstraction Refinement for Bayesian Program Analysis

  2025cites this paper
• Program Slicing: A Brief Retrospective

  2025cites this paper
• Towards Effective Complementary Security Analysis Using Large Language Models

  2025cites this paper
• Fact-Aligned and Template-Constrained Static Analyzer Rule Enhancement with LLMs

  2025cites this paper
• Actionable Warning Is Not Enough: Recommending Valid Actionable Warnings with Weak Supervision

  2025cites this paper
• Context-based statement-level vulnerability localization

  2024cites this paper
• Enhancing DevSecOps practice with Large Language Models and Security Chaos Engineering

  2024cites this paper
• Pre-trained Model-based Actionable Warning Identification: A Feasibility Study

  2024influential citation
• Analyzing source code vulnerabilities in the D2A dataset with ML ensembles and C-BERT

  2024cites this paper
• FuzzSlice: Pruning False Positives in Static Analysis Warnings Through Function-Level Fuzzing

  2024cites this paper
• Utilizing Precise and Complete Code Context to Guide LLM in Automatic False Positive Mitigation

  2024cites this paper
• Code Vulnerability Detection via Signal-Aware Learning

  2023cites this paper
• Understanding Why and Predicting When Developers Adhere to Code-Quality Standards

  2023cites this paper
• Incorporating Signal Awareness in Source Code Modeling: An Application to Vulnerability Detection

  2023cites this paper
• An empirical assessment of machine learning approaches for triaging reports of static analysis tools

  2023influential citation
• Machine Learning for Actionable Warning Identification: A Comprehensive Survey

  2023influential citation
• VALAR: Streamlining Alarm Ranking in Static Analysis with Value-Flow Assisted Active Learning

  2023cites this paper
• Mitigating False Positive Static Analysis Warnings: Progress, Challenges, and Opportunities

  2023influential citation
• The Journal of Systems and Software

  2023cites this paper
• Securing cloud-based military systems with Security Chaos Engineering and Artificial Intelligence

  2023cites this paper
• Survey of Approaches for Postprocessing of Static Analysis Alarms

  2022cites this paper
• RVprio: A tool for prioritizing runtime verification violations

  2022cites this paper
• Static Code Analysis Alarms Filtering Reloaded: a New Real-World Dataset and its ML-Based Utilization

  2022influential citation
• WINE: Warning miner for improving bug finders

  2022cites this paper
• SATune: A Study-Driven Auto-Tuning Approach for Configurable Software Verification Tools

  2021cites this paper
• Software Security Static Analysis False Alerts Handling Approaches

  2021cites this paper
• D2A: A Dataset Built for AI-Based Vulnerability Detection Methods Using Differential Analysis

  2021cites this paper
• Assessing Validity of Static Analysis Warnings using Ensemble Learning

  2021cites this paper
• Validating static warnings via testing code fragments

  2021cites this paper
• A novel deep learning-based feature selection model for improving the static analysis of vulnerability detection

  2021cites this paper
• Are automated static analysis tools worth it? An investigation into relative warning density and external software quality on the example of Apache open source projects

  2021cites this paper
• Sporq: An Interactive Environment for Exploring Code using Query-by-Example

  2021cites this paper
• Towards Reliable AI for Source Code Understanding

  2021cites this paper
• Difficult SQLi Code Patterns for Static Code Analysis Tools

  2020cites this paper
• Study and Ranking of Vulnerabilities in the Indian Mobile Banking Applications Using Static Analysis and Bayes Classification

  2020cites this paper
• Automated defect identification via path analysis-based features with transfer learning

  2020cites this paper
• Prioritizing Runtime Verification Violations

  2020cites this paper
• Defining a Software Maintainability Dataset: Collecting, Aggregating and Analysing Expert Evaluations of Software Maintainability

  2020cites this paper
• Postprocessing of static analysis alarms

  2020cites this paper
• Probing model signal-awareness via prediction-preserving input minimization

  2020cites this paper
• Continuously reasoning about programs using differential Bayesian inference

  2019cites this paper
• Feature Set Selection for Improved Classification of Static Analysis Alerts

  2019cites this paper
• An Improved Method of Static Code Analysis Based on the Context-Sensitive Rules

  2019cites this paper
• An Empirical Assessment of Machine Learning Approaches for Triaging Reports of a Java Static Analysis Tool

  2019influential citation
• Learning a Classifier for Prediction of Maintainability Based on Static Analysis Tools

  2019cites this paper
• Effects of Automated Static Analysis Tools: A Multidimensional View on Quality Evolution

  2019cites this paper
• An Analyzer for Program Parallelization and Optimization

  2018cites this paper
• On the Impact of Tokenizer and Parameters on N-Gram Based Code Analysis

  2018cites this paper
• WarningsGuru: integrating statistical bug models with static analysis to provide timely and specific bug warnings

  2018cites this paper
• Software quality assessment in practice: a hypothesis-driven framework

  2018cites this paper
• Neural-augmented static analysis of Android communication

  2018cites this paper
• Compiler fuzzing through deep learning

  2018cites this paper
• User-guided program reasoning using Bayesian inference

  2018cites this paper
• Graph-based Classification for Detecting Instances of Bug Patterns Giacomo Iadarola

  2018cites this paper
• Using Machine Learning Techniques to Classify and Predict Static Code Analysis Tool Warnings

  2018cites this paper
• rideApp RideSharing Application smsApp SMS Application mapApp Map Application SearchActivity MsgActivity action : VIEW dataScheme : geo action

  2018cites this paper
• Buffer overflow detection for C programs is hard to learn

  2018cites this paper
• Edinburgh Research Explorer Compiler Fuzzing through Deep Learning

  2018cites this paper
• Beyond Deductive Methods in Program Analysis

  2018cites this paper
• A Survey of Machine Learning for Big Code and Naturalness

  2017cites this paper
• Identifying and Documenting False Positive Patterns Generated by Static Code Analysis Tools

  2017cites this paper
• A hybrid approach to improving program security

  2017cites this paper