Static analysis is a widely adopted technique in the industrial development of software systems. It allows to automatically check for code compliance with respect to predefined programming rules. When applied to large software systems, sanitizing the code in an efficient way requires a careful guidance, as a high number of (more or less relevant) rule infringements can result from the analysis. We report the results of a static analysis study conducted on several industrial software systems developed by SELEX ES, a large manufacturer of software-intensive mission-critical systems. We analyzed results on a set of 156 software components developed in SELEX ES; based on them, we developed and experimented an approach to prioritize components and violated rules to correct for a cost-effective code sanitization. Results highlight the benefits that can be achieved in terms of quality targets and incurred cost.
Prioritizing Correction of Static Analysis Infringements for Cost-Effective Code Sanitization / G., Carrozza; Cinque, Marcello; Giordano, Ugo; Pietrantuono, Roberto; Russo, Stefano. - (2015), pp. 25-31. (Intervento presentato al convegno 2015 IEEE/ACM 2nd International Workshop on Software Engineering Research and Industrial Practice tenutosi a Firenze nel 17 Maggio 2015) [10.1109/SERIP.2015.13].
Prioritizing Correction of Static Analysis Infringements for Cost-Effective Code Sanitization
CINQUE, MARCELLO;GIORDANO, UGO;PIETRANTUONO, ROBERTO;RUSSO, STEFANO
2015
Abstract
Static analysis is a widely adopted technique in the industrial development of software systems. It allows to automatically check for code compliance with respect to predefined programming rules. When applied to large software systems, sanitizing the code in an efficient way requires a careful guidance, as a high number of (more or less relevant) rule infringements can result from the analysis. We report the results of a static analysis study conducted on several industrial software systems developed by SELEX ES, a large manufacturer of software-intensive mission-critical systems. We analyzed results on a set of 156 software components developed in SELEX ES; based on them, we developed and experimented an approach to prioritize components and violated rules to correct for a cost-effective code sanitization. Results highlight the benefits that can be achieved in terms of quality targets and incurred cost.I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
