Static analyzer Svace for finding of defects in program source code
This paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scala...
Main Authors: | , , , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Ivannikov Institute for System Programming of the Russian Academy of Sciences
2018-10-01
|
Series: | Труды Института системного программирования РАН |
Subjects: | |
Online Access: | https://ispranproceedings.elpub.ru/jour/article/view/774 |
_version_ | 1818749794683715584 |
---|---|
author | V. P. Ivannikov A. A. Belevantsev A. E. Borodin V. N. Ignatiev D. M. Zhurikhin A. I. Avetisyan M. I. Leonov |
author_facet | V. P. Ivannikov A. A. Belevantsev A. E. Borodin V. N. Ignatiev D. M. Zhurikhin A. I. Avetisyan M. I. Leonov |
author_sort | V. P. Ivannikov |
collection | DOAJ |
description | This paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scalability up to programs of millions lines of code and acceptable quality of analysis (30-80% of true positive warnings). |
first_indexed | 2024-12-18T04:09:27Z |
format | Article |
id | doaj.art-3a598609c4dc49a7a88bc78698287dd3 |
institution | Directory Open Access Journal |
issn | 2079-8156 2220-6426 |
language | English |
last_indexed | 2024-12-18T04:09:27Z |
publishDate | 2018-10-01 |
publisher | Ivannikov Institute for System Programming of the Russian Academy of Sciences |
record_format | Article |
series | Труды Института системного программирования РАН |
spelling | doaj.art-3a598609c4dc49a7a88bc78698287dd32022-12-21T21:21:31ZengIvannikov Institute for System Programming of the Russian Academy of SciencesТруды Института системного программирования РАН2079-81562220-64262018-10-0126123125010.15514/ISPRAS-2014-26(1)-7774Static analyzer Svace for finding of defects in program source codeV. P. Ivannikov0A. A. Belevantsev1A. E. Borodin2V. N. Ignatiev3D. M. Zhurikhin4A. I. Avetisyan5M. I. Leonov6ИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНThis paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scalability up to programs of millions lines of code and acceptable quality of analysis (30-80% of true positive warnings).https://ispranproceedings.elpub.ru/jour/article/view/774статический анализанализ потока данныхуязвимостимежпроцедурный анализанализ на основе аннотаций |
spellingShingle | V. P. Ivannikov A. A. Belevantsev A. E. Borodin V. N. Ignatiev D. M. Zhurikhin A. I. Avetisyan M. I. Leonov Static analyzer Svace for finding of defects in program source code Труды Института системного программирования РАН статический анализ анализ потока данных уязвимости межпроцедурный анализ анализ на основе аннотаций |
title | Static analyzer Svace for finding of defects in program source code |
title_full | Static analyzer Svace for finding of defects in program source code |
title_fullStr | Static analyzer Svace for finding of defects in program source code |
title_full_unstemmed | Static analyzer Svace for finding of defects in program source code |
title_short | Static analyzer Svace for finding of defects in program source code |
title_sort | static analyzer svace for finding of defects in program source code |
topic | статический анализ анализ потока данных уязвимости межпроцедурный анализ анализ на основе аннотаций |
url | https://ispranproceedings.elpub.ru/jour/article/view/774 |
work_keys_str_mv | AT vpivannikov staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT aabelevantsev staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT aeborodin staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT vnignatiev staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT dmzhurikhin staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT aiavetisyan staticanalyzersvaceforfindingofdefectsinprogramsourcecode AT mileonov staticanalyzersvaceforfindingofdefectsinprogramsourcecode |