On the public citation graph

Static analysis of source code security: Assessment of tools against SAMATE tests

0 signed · 91 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/11430230_4openalex-snapshot
Comparing Bug Finding Tools with Reviews and Tests
inferredcites →https://doi.org/10.1007/978-3-540-24730-2_15openalex-snapshot
A Tool for Checking ANSI-C Programs
inferredcites →https://doi.org/10.1007/978-3-540-31980-1_40openalex-snapshot
SATABS: SAT-Based Predicate Abstraction for ANSI-C
inferredcites →https://doi.org/10.1007/s10009-007-0044-zopenalex-snapshot
The software model checker Blast
inferredcites →https://doi.org/10.1016/b978-155860760-6/50007-8openalex-snapshot
Information retrieval
inferredcites →https://doi.org/10.1016/j.infsof.2010.12.007openalex-snapshot
A systematic literature review of actionable alert identification techniques for automated static code analysis
inferredcites →https://doi.org/10.1109/52.976940openalex-snapshot
Improving security using extensible lightweight static analysis
inferredcites →https://doi.org/10.1109/acsac.2000.898880openalex-snapshot
ITS4: a static vulnerability scanner for C and C++ code
inferredcites →https://doi.org/10.1109/compsac.2006.55openalex-snapshot
Integrating Static and Dynamic Analysis for Detecting Vulnerabilities
inferredcites →https://doi.org/10.1109/dasc.2007.4391957openalex-snapshot
Software assurance with samate reference dataset, tool standards, and studies
inferredcites →https://doi.org/10.1109/icsm.2006.58openalex-snapshot
Software Assurance During Maintenance
inferredcites →https://doi.org/10.1109/issre.2004.1openalex-snapshot
A Comparison of Bug Finding Tools for Java
inferredcites →https://doi.org/10.1109/issre.2006.43openalex-snapshot
Software Security: Building Security In
inferredcites →https://doi.org/10.1109/mc.2008.514openalex-snapshot
Automated Code Review Tools for Security
inferredcites →https://doi.org/10.1109/ms.2008.130openalex-snapshot
Using Static Analysis to Find Bugs
inferredcites →https://doi.org/10.1109/msp.2004.111openalex-snapshot
Static analysis for security
inferredcites →https://doi.org/10.1109/msp.2006.77openalex-snapshot
Putting the tools to work: how to succeed with source code analysis
inferredcites →https://doi.org/10.1109/msp.2006.84openalex-snapshot
A process for performing security code reviews
inferredcites →https://doi.org/10.1109/ths.2008.4534479openalex-snapshot
Integrating Static Analysis into a Secure Software Development Process
inferredcites →https://doi.org/10.1109/tse.2004.22openalex-snapshot
Modular verification of software components in C
inferredcites →https://doi.org/10.1109/tse.2006.38openalex-snapshot
On the value of static analysis for fault detection in software
inferredcites →https://doi.org/10.1145/1029894.1029911openalex-snapshot
Testing static analysis tools using exploitable buffer overflows from open source code
inferredcites →https://doi.org/10.1145/1041685.1029911openalex-snapshot
Testing static analysis tools using exploitable buffer overflows from open source code
inferredcites →https://doi.org/10.1145/1062455.1062558openalex-snapshot
Static analysis tools as early indicators of pre-release defect density
inferredcites →https://doi.org/10.1145/1108768.1108798openalex-snapshot
Evaluating and tuning a static analysis to find null pointer bugs
inferredcites →https://doi.org/10.1145/1108792.1108798openalex-snapshot
Evaluating and tuning a static analysis to find null pointer bugs
inferredcites →https://doi.org/10.1145/1251535.1251536openalex-snapshot
Evaluating static analysis defect warnings on production software
inferredcites →https://doi.org/10.1145/1387830.1387833openalex-snapshot
Static analysis tools for security checking in code at Motorola
inferredcites →https://doi.org/10.1145/1394504.1394505openalex-snapshot
Parfait
inferredcites →https://doi.org/10.1145/1394504.1394506openalex-snapshot
Securing Java code
inferredcites →https://doi.org/10.1145/1413140.1413178openalex-snapshot
Creating the secure software testing target list
inferredcites →https://doi.org/10.1145/1555860.1555866openalex-snapshot
BegBunch
inferredcites →https://doi.org/10.1145/301618.301665openalex-snapshot
A theory of type qualifiers
inferredcites →https://doi.org/10.1145/940071.940115openalex-snapshot
ARCHER
inferredcites →https://doi.org/10.21236/ada441311openalex-snapshot
SAT-Based Predicate Abstraction of Programs
inferredcites →https://doi.org/10.6028/nist.sp.800-27raopenalex-snapshot
Engineering principles for information technology security (a baseline for achieving security), revision a

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1002/spy2.8openalex-snapshot
Detection of security vulnerabilities in C language applications
inferred← citeshttps://doi.org/10.1007/978-3-030-42051-2_9openalex-snapshot
Difficult XSS Code Patterns for Static Code Analysis Tools
inferred← citeshttps://doi.org/10.1007/978-3-319-07674-4_68openalex-snapshot
Theorem Prover Based Static Analyzer: Comparison Analysis Between ESC/Java2 and KeY
inferred← citeshttps://doi.org/10.1007/978-3-319-91602-6openalex-snapshot
Agile Processes in Software Engineering and Extreme Programming
inferred← citeshttps://doi.org/10.1007/978-3-319-91602-6_6openalex-snapshot
Myths and Facts About Static Application Security Testing Tools: An Action Research at Telenor Digital
inferred← citeshttps://doi.org/10.1007/s00607-018-0664-zopenalex-snapshot
An empirical study on combining diverse static analysis tools for web security vulnerabilities based on development scenarios
inferred← citeshttps://doi.org/10.1007/s11219-026-09776-1openalex-snapshot
Improving security vulnerability assessment with attention-guided hierarchical code simplification
inferred← citeshttps://doi.org/10.1016/j.cose.2021.102470openalex-snapshot
On the adoption of static analysis for software security assessment–A case study of an open-source e-government project
inferred← citeshttps://doi.org/10.1016/j.cose.2022.102788openalex-snapshot
A new multi-label dataset for Web attacks CAPEC classification using machine learning techniques
inferred← citeshttps://doi.org/10.1016/j.infsof.2015.08.002openalex-snapshot
On the capability of static code analysis to detect security vulnerabilities
inferred← citeshttps://doi.org/10.1016/j.infsof.2018.07.014openalex-snapshot
What can violations of good practices tell about the relationship between GoF patterns and run-time quality attributes?
inferred← citeshttps://doi.org/10.1016/j.jss.2019.110427openalex-snapshot
An empirical study of security warnings from static application security testing tools
inferred← citeshttps://doi.org/10.1016/j.jss.2026.113041openalex-snapshot
A Neuro-Symbolic Software Vulnerability Detection Method via Deterministic Logic Injection
inferred← citeshttps://doi.org/10.1016/j.knosys.2022.109450openalex-snapshot
Turn tree into graph: Automatic code review via simplified AST driven graph convolutional network
inferred← citeshttps://doi.org/10.1088/1742-6596/1015/4/042042openalex-snapshot
Examination of suspicious objects by virus analysts
inferred← citeshttps://doi.org/10.1109/access.2021.3050566openalex-snapshot
Effective Filter for Common Injection Attacks in Online Web Applications
inferred← citeshttps://doi.org/10.1109/access.2023.3266385openalex-snapshot
Input Validation Vulnerabilities in Web Applications: Systematic Review, Classification, and Analysis of the Current State-of-the-Art
inferred← citeshttps://doi.org/10.1109/access.2024.3389955openalex-snapshot
Comprehensive Evaluation of Static Analysis Tools for Their Performance in Finding Vulnerabilities in Java Code
inferred← citeshttps://doi.org/10.1109/access.2024.3522094openalex-snapshot
Blending Static and Dynamic Analysis for Web Application Vulnerability Detection: Methodology and Case Study
inferred← citeshttps://doi.org/10.1109/coufless.2015.10openalex-snapshot
Evaluating Bug Finders -- Test and Measurement of Static Code Analyzers
inferred← citeshttps://doi.org/10.1109/edcc.2017.16openalex-snapshot
On Combining Diverse Static Analysis Tools for Web Security: An Empirical Study
inferred← citeshttps://doi.org/10.1109/fareastcon50210.2020.9271171openalex-snapshot
Development of a System for Static Analysis of C ++ Language Code
inferred← citeshttps://doi.org/10.1109/iccda64887.2024.10867380openalex-snapshot
Techniques to Evaluate and Enhance Security Measures in Cloud Computing Environments
inferred← citeshttps://doi.org/10.1109/iccse.2019.8845389openalex-snapshot
Static Analyzers and Potential Future Research Directions for Scala: An Overview
inferred← citeshttps://doi.org/10.1109/icimtech59029.2023.10277919openalex-snapshot
The Impact of Shift-Left Testing to Software Quality in Agile Methodology: A Case Study
inferred← citeshttps://doi.org/10.1109/icissec.2015.7371019openalex-snapshot
Mitigating SQL Injection Attacks via Hybrid Threat Modelling
inferred← citeshttps://doi.org/10.1109/icmla51294.2020.00171openalex-snapshot
Using Graph Embeddings and Machine Learning to Detect Cryptography Misuse in Source Code
inferred← citeshttps://doi.org/10.1109/icst.2016.21openalex-snapshot
An Empirical Study on Detecting and Fixing Buffer Overflow Bugs
inferred← citeshttps://doi.org/10.1109/issre.2017.27openalex-snapshot
Practical Evaluation of Static Analysis Tools for Cryptography: Benchmarking Method and Case Study
inferred← citeshttps://doi.org/10.1109/qrs-c63300.2024.00122openalex-snapshot
Research on the Integration Method of Software Static Testing Tools Based on Machine Learning
inferred← citeshttps://doi.org/10.1109/tr.2019.2937214openalex-snapshot
Understanding How to Use Static Analysis Tools for Detecting Cryptography Misuse in Software
inferred← citeshttps://doi.org/10.1145/2915970.2915994openalex-snapshot
Improving vulnerability detection measurement
inferred← citeshttps://doi.org/10.1145/3475716.3475781openalex-snapshot
An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing
inferred← citeshttps://doi.org/10.1155/2017/6158107openalex-snapshot
Performance-Based Comparative Assessment of Open Source Web Vulnerability Scanners
inferred← citeshttps://doi.org/10.11591/ijece.v10i6.pp6061-6070openalex-snapshot
Automated server-side model for recognition of security vulnerabilities in scripting languages
inferred← citeshttps://doi.org/10.17485/ijst/2016/v9i20/91312openalex-snapshot
Static Analysis of Security Vulnerabilities in C/C++ Applications
inferred← citeshttps://doi.org/10.18293/seke2022-022openalex-snapshot
Contrastive Learning for Multi-Modal Automatic Code Review
inferred← citeshttps://doi.org/10.19101/ijacr.2018.838012openalex-snapshot
The approaches to quantify web application security scanners quality: a review
inferred← citeshttps://doi.org/10.23919/cisti.2017.7975677openalex-snapshot
Use of SQALE and tools for analysis and identification of code technical debt through static analysis
inferred← citeshttps://doi.org/10.24251/hicss.2019.902openalex-snapshot
Detecting Important Terms in Source Code for Program Comprehension
inferred← citeshttps://doi.org/10.25046/aj0602105openalex-snapshot
On the Combination of Static Analysis for Software Security Assessment – A Case Study of an Open-Source e-Government Project
inferred← citeshttps://doi.org/10.32604/cmc.2021.014596openalex-snapshot
MMALE—A Methodology for Malware Analysis in Linux Environments
inferred← citeshttps://doi.org/10.32604/cmes.2021.010700openalex-snapshot
Hybrid Security AssessmentMethodology forWeb Applications
inferred← citeshttps://doi.org/10.32604/cmes.2021.017213openalex-snapshot
Combinatorial Method with Static Analysis for Source Code Security in Web Applications
inferred← citeshttps://doi.org/10.32604/cmes.2022.020976openalex-snapshot
Systematic Approach for Web Protection Runtime Tools’ Effectiveness Analysis
inferred← citeshttps://doi.org/10.32604/iasc.2021.017260openalex-snapshot
Analysis of Security Testing Techniques
inferred← citeshttps://doi.org/10.3390/app10249119openalex-snapshot
On Combining Static, Dynamic and Interactive Analysis Security Testing Tools to Improve OWASP Top Ten Security Vulnerability Detection in Web Applications
inferred← citeshttps://doi.org/10.3390/su12124945openalex-snapshot
Prevention and Fighting against Web Attacks through Anomaly Detection Technology. A Systematic Review
inferred← citeshttps://doi.org/10.33915/etd.6403openalex-snapshot
Static Code Analysis: On Detection of Security Vulnerabilities and Classification of Warning Messages
inferred← citeshttps://doi.org/10.36227/techrxiv.22810664openalex-snapshot
A Comparative Analysis of Static and Dynamic Code Analysis Techniques
inferred← citeshttps://doi.org/10.36227/techrxiv.22810664.v1openalex-snapshot
A Comparative Analysis of Static and Dynamic Code Analysis Techniques
inferred← citeshttps://doi.org/10.47749/t/unicamp.2017.993696openalex-snapshot
Towards the safe development of cryptographic software
inferred← citeshttps://doi.org/10.47749/t/unicamp.2022.1241300openalex-snapshot
Detecting cryptographic misuse with machine learning
inferred← citeshttps://doi.org/10.5753/sbseg.2020.19223openalex-snapshot
A machine learning approach to detect misuse of cryptographic APIs in source code
inferred← citeshttps://doi.org/10.5753/sbseg_estendido.2025.11875openalex-snapshot
Mapeamento Sistemático de Comparativos de Ferramentas de Análise Estática de Código com Foco na Segurança
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.