Accession Number:

AD1087064

Title:

Hands-On Tutorial: Auditing Static Analysis Alerts Using a Lexicon and Rules

Descriptive Note:

Technical Report

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA PITTSBURGH United States

Report Date:

2017-09-01

Pagination or Media Count:

108.0

Abstract:

Auditing Lexicon And Rules. This tutorial covers a set of auditing rules and part of the lexicon weve developed. Lexicon contains a set of determinations for static analysis alerts. Includes a set of auditing rules to help auditors make consistent decisions in commonly-encountered situations. Different auditors should make the same determination for a given alert Improve the quality and consistency of audit data for the purpose of building machine learning classifiers. Help organizations make better-informed decisions about bug-fixes, development, and future audits.

Subject Categories:

  • Computer Programming and Software

Distribution Statement:

APPROVED FOR PUBLIC RELEASE