On the public citation graph

Improving software security with static automated code analysis in an industry setting

https://doi.org/10.1002/spe.2109
0 signed · 61 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/spip.355openalex-snapshot
From Traditional to Streamline Development — opportunities and challenges
inferredcites →https://doi.org/10.1007/978-1-4615-4625-2openalex-snapshot
Experimentation in Software Engineering
inferredcites →https://doi.org/10.1007/978-3-642-48354-7_5openalex-snapshot
Software Engineering Economics
inferredcites →https://doi.org/10.1007/978-3-662-03811-6openalex-snapshot
Principles of Program Analysis
inferredcites →https://doi.org/10.1007/s10664-010-9136-6openalex-snapshot
The effect of moving from a plan-driven to an incremental software development approach with agile practices
inferredcites →https://doi.org/10.1016/j.entcs.2008.06.039openalex-snapshot
A Comparative Study of Industrial Static Analysis Tools
inferredcites →https://doi.org/10.1016/j.infsof.2008.01.010openalex-snapshot
On the secure software development process: CLASP, SDL and Touchpoints compared
inferredcites →https://doi.org/10.1016/j.jss.2009.03.036openalex-snapshot
A comparison of issues and advantages in agile and incremental development between state of the art and an industrial case
inferredcites →https://doi.org/10.1080/09500790.2011.582317openalex-snapshot
Case study research: design and methods
inferredcites →https://doi.org/10.1109/52.976940openalex-snapshot
Improving security using extensible lightweight static analysis
inferredcites →https://doi.org/10.1109/acsac.2000.898880openalex-snapshot
ITS4: a static vulnerability scanner for C and C++ code
inferredcites →https://doi.org/10.1109/discex.2000.821514openalex-snapshot
Buffer overflows: attacks and defenses for the vulnerability of the decade
inferredcites →https://doi.org/10.1109/esem.2009.5316010openalex-snapshot
Context in industrial software engineering research
inferredcites →https://doi.org/10.1109/euromicro.2005.53openalex-snapshot
Software Security Analysis - Execution Phase Audit
inferredcites →https://doi.org/10.1109/issre.2006.43openalex-snapshot
Software Security: Building Security In
inferredcites →https://doi.org/10.1109/mc.2003.1193223openalex-snapshot
The battle over the universal java IDE
inferredcites →https://doi.org/10.1109/ms.2008.130openalex-snapshot
Using Static Analysis to Find Bugs
inferredcites →https://doi.org/10.1109/msp.2004.111openalex-snapshot
Static analysis for security
inferredcites →https://doi.org/10.1109/msp.2005.159openalex-snapshot
Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors
inferredcites →https://doi.org/10.1145/1029894.1029911openalex-snapshot
Testing static analysis tools using exploitable buffer overflows from open source code
inferredcites →https://doi.org/10.1145/1041685.1029911openalex-snapshot
Testing static analysis tools using exploitable buffer overflows from open source code
inferredcites →https://doi.org/10.1145/1375696.1375707openalex-snapshot
Evaluating the cost reduction of static code analysis for software security

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1002/smr.1918openalex-snapshot
Internal quality assurance for external contributions in GitHub: An empirical investigation
inferred← citeshttps://doi.org/10.1002/spe.3175openalex-snapshot
Toward a readiness model for secure software coding
inferred← citeshttps://doi.org/10.1007/978-3-031-21388-5_11openalex-snapshot
Data-Driven Improvement of Static Application Security Testing Service: An Experience Report in Visma
inferred← citeshttps://doi.org/10.1007/978-3-032-36816-4_16openalex-snapshot
What Do Developers Fix First? Early Observations from Code Reviews in a Research and Development Organization
inferred← citeshttps://doi.org/10.1007/978-3-319-91602-6openalex-snapshot
Agile Processes in Software Engineering and Extreme Programming
inferred← citeshttps://doi.org/10.1007/978-3-319-91602-6_6openalex-snapshot
Myths and Facts About Static Application Security Testing Tools: An Action Research at Telenor Digital
inferred← citeshttps://doi.org/10.1007/s10664-015-9403-7openalex-snapshot
Game of detections: how are security vulnerabilities discovered in the wild?
inferred← citeshttps://doi.org/10.1007/s11334-024-00563-4openalex-snapshot
IT2F-SEDNN: an interval type-2 fuzzy logic-based stacked ensemble deep learning approach for early phase software dependability analysis
inferred← citeshttps://doi.org/10.1016/j.cose.2021.102470openalex-snapshot
On the adoption of static analysis for software security assessment–A case study of an open-source e-government project
inferred← citeshttps://doi.org/10.1016/j.infsof.2013.10.004openalex-snapshot
Comparing attack trees and misuse cases in an industrial setting
inferred← citeshttps://doi.org/10.1016/j.infsof.2015.08.002openalex-snapshot
On the capability of static code analysis to detect security vulnerabilities
inferred← citeshttps://doi.org/10.1016/j.infsof.2022.106844openalex-snapshot
Featherweight assisted vulnerability discovery
inferred← citeshttps://doi.org/10.1016/j.infsof.2023.107315openalex-snapshot
Towards a successful secure software acquisition
inferred← citeshttps://doi.org/10.1016/j.jss.2013.04.023openalex-snapshot
Countermeasure graphs for software security risk assessment: An action research
inferred← citeshttps://doi.org/10.1109/access.2020.2983762openalex-snapshot
Testing Method for Software With Randomness Using Genetic Algorithm
inferred← citeshttps://doi.org/10.1109/access.2024.3389955openalex-snapshot
Comprehensive Evaluation of Static Analysis Tools for Their Performance in Finding Vulnerabilities in Java Code
inferred← citeshttps://doi.org/10.1109/ares.2015.45openalex-snapshot
A Novel Security-Enhanced Agile Software Development Process Applied in an Industrial Setting
inferred← citeshttps://doi.org/10.1109/ase63991.2025.00168openalex-snapshot
Interpretable Vulnerability Detection Reports
inferred← citeshttps://doi.org/10.1109/eurosp51992.2021.00012openalex-snapshot
An Investigation of Online Reverse Engineering Community Discussions in the Context of Ghidra
inferred← citeshttps://doi.org/10.1109/pst65910.2025.11268853openalex-snapshot
A Static Analysis of Popular C Packages in Linux
inferred← citeshttps://doi.org/10.1109/qrs54544.2021.00105openalex-snapshot
Analyzing Software Security-related Size and its Relationship with Vulnerabilities in OSS
inferred← citeshttps://doi.org/10.1109/qrs57517.2022.00116openalex-snapshot
A Framework for Scanning Privacy Information based on Static Analysis
inferred← citeshttps://doi.org/10.1109/sp.2018.00003openalex-snapshot
Hackers vs. Testers: A Comparison of Software Vulnerability Discovery Processes
inferred← citeshttps://doi.org/10.1109/sp40001.2021.00092openalex-snapshot
HackEd: A Pedagogical Analysis of Online Vulnerability Discovery Exercises
inferred← citeshttps://doi.org/10.1145/2647648.2647656openalex-snapshot
Action research as a model for industry-academia collaboration in the software engineering context
inferred← citeshttps://doi.org/10.1145/2652524.2652533openalex-snapshot
Discovering buffer overflow vulnerabilities in the wild
inferred← citeshttps://doi.org/10.1145/3339252.3339263openalex-snapshot
Costing Secure Software Development
inferred← citeshttps://doi.org/10.1145/3548606.3560569openalex-snapshot
Understanding the How and the Why
inferred← citeshttps://doi.org/10.1145/3706598.3713630openalex-snapshot
An Investigation of Interaction and Information Needs for Protocol Reverse Engineering Automation
inferred← citeshttps://doi.org/10.25046/aj0602105openalex-snapshot
On the Combination of Static Analysis for Software Security Assessment – A Case Study of an Open-Source e-Government Project
inferred← citeshttps://doi.org/10.2507/32nd.daaam.proceedings.069openalex-snapshot
Evaluation of Strategies over Static Code Analysis Tools
inferred← citeshttps://doi.org/10.3103/s0146411616040064openalex-snapshot
Optimization of program recursive function calls analysis method
inferred← citeshttps://doi.org/10.31908/19098367.2846openalex-snapshot
Static Code Analysis: A Tree of Science Review
inferred← citeshttps://doi.org/10.33915/etd.6403openalex-snapshot
Static Code Analysis: On Detection of Security Vulnerabilities and Classification of Warning Messages
inferred← citeshttps://doi.org/10.4028/www.scientific.net/amr.977.525openalex-snapshot
The Design of Software Protection Mechanism Based on Virtual Machine
inferred← citeshttps://doi.org/10.48550/arxiv.1912.00317openalex-snapshot
An Observational Investigation of Reverse Engineers' Processes
inferred← citeshttps://doi.org/10.54692/ijeci.2023.0702154openalex-snapshot
The role of Artificial Intelligence in Cyber Security and Incident Response
inferred← citeshttps://doi.org/10.7472/jksii.2014.15.1.13openalex-snapshot
A Systematic Literature Review on Secure Software Development using Feature Driven Development (FDD) Agile Model
inferred← citeshttps://doi.org/10.9790/0661-1804056567openalex-snapshot
A Systematic Review of Software Security Issues Associated With Agile Software Development
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.