期刊文献+

软件静态分析工具评析 被引量:7

Evaluation of Software Static Analysis Tools
在线阅读 下载PDF
导出
摘要 为了在软件生命周期的编码阶段尽可能多地发现软件缺陷以降低软件成本和开发时间,需要对被测程序源代码实施软件静态分析。软件静态分析最有效的手段是使用软件静态分析工具。针对C程序常见的软件缺陷,通过对几种主流静态分析工具的功能性对比分析,探讨了软件静态分析工具的优缺点及影响软件静态分析工具选择的诸多因素,可为软件测试人员选择合适的软件静态分析工具提供参考。 For finding more software defects during coding phase in software lifecycle to decrease costs and development time,it is necessary for us to actualize static analysis of source codes tested,the most effective means of carrying out static analysis is to use static analysis tools.Aiming at software defects of C procedure to us,via comparison of functionality of several popular static analysis tools,we discuss the advantages and shortages of static analysis tools as well as many factors which influence us to select static analysis tools.These factors provide us references to selection among static analysis tools.
作者 王凯 孔祥营
出处 《指挥控制与仿真》 2011年第2期109-111,119,共4页 Command Control & Simulation
关键词 软件生命周期 软件缺陷 静态分析 software lifecycle software defect static analysis
分类号 E919 [军事]
  • 相关文献

参考文献16

二级参考文献56

  • 1朱小骏,高建华.一种面向对象程序系统的有效测试方法[J].计算机工程与设计,2004,25(7):1107-1110. 被引量:2
  • 2杨小龙,刘坚.C/C++源程序缓冲区溢出漏洞的静态检测[J].计算机工程与应用,2004,40(20):108-110. 被引量:10
  • 3文昌辞,王昭顺.软件测试自动化静态分析研究[J].计算机工程与设计,2005,26(4):987-989. 被引量:22
  • 4[1]Brooks F P Jr.The Mythical Man-Month: Essays on Software Engineering,Anniversary Edition,(2nd ed.)Addison-Wesley 1995
  • 5[2]Fewster M,Graham D.Software Test Automation.Addison -Wesley,1999
  • 6[3]PurifyPlus.http://www.rational.com/products/pqc/index.jsp
  • 7[4]Bush W,Pincus J,Sielaff D.A static analyzer for finding dynamic programming errors.Software - Practice and Experience,2000,30(7):755~802
  • 8[5]Engler D,Chelf B,Chou A,Hallem S.Checking system rules using system-specific programmer-written compiler extensions.In:Proc.of the Fourth Symposium on Operating System Design and Implementation,San Diego,Oct.2000
  • 9[6]Detlefs D L,Leino K R M,Nelson G,Saxe J B.Extended static checking:[SRC Research Report 159].Compaq System Research Center,1998
  • 10[7]LDRA.http://www.ldra.co.uk

共引文献63

同被引文献43

  • 1程绍银,蒋凡,林锦滨,唐艳武.基于有限回溯符号执行的软件疑似缺陷的自动验证[J].清华大学学报(自然科学版),2009(S2):2222-2227. 被引量:1
  • 2刘文伟,刘坚.一个重建GCC抽象语法树的方法[J].计算机工程与应用,2004,40(18):125-128. 被引量:7
  • 3夏一民,罗军,张民选.基于静态分析的安全漏洞检测技术研究[J].计算机科学,2006,33(10):279-282. 被引量:30
  • 4屈婉霞,李暾,郭阳,杨晓东.模型检验中抽象技术研究综述[J].计算机工程与应用,2006,42(33):15-19. 被引量:4
  • 5Chess B, McGraw G. Static analysis for security [ J ]. IEEE Security & Privacy, 2004,2(6) :76-79.
  • 6Rice H G. Classes of recursively enumerable sets m,d their decision problems[ J]. Transactions of the American Math- ematical Society, 1953,74(2) :358-366.
  • 7Par Emanuelsson, Ulf Nilsson. A comparative study of in- dustrial static analysis tools [ C ]// Proceedings of the 3rd International Workshop on Systems Software Verification. 2008,217:5-21.
  • 8David Evans, David Laroehelle. Splint Manual[ DB/OL]. ht- tp ://www. splint, org/mmmal/manual, html, 2003-04-27.
  • 9Ali Almossawi, Kelvin Lira, Tamnay Sinha. Analysis Tool Evaluation: Coverity Prevent [ DB/OL]. http://www, es. emu. edu/ aldrieh/courses/654/tools/eure-eoverity-06. pdf#seareh — 'Coverity Prevent', 2006-05-01.
  • 10Edmund Clarke, Daniel Kroening, Karen Yurav. Behavior- al consistency of C and Verilog programs using bounded model checking[ C]// Proceedings of the 40th Annual De- sign Automation Conference. 2003:368-371.

引证文献7

二级引证文献15

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部