SlideShare a Scribd company logo
Static Analysis BOF Thought experiment:  A coherent Eclipse narrative about Static Analysis Mike Norman
Existing Tools and Platforms Where does it sit? TPTP, PTP, CDT(Codan), JDT? 3rd-party tool integration Open Source e.g. Findbugs Commercial e.g. CodePro Research Prototypes e.g. Proof General Are there benefits to tools integration? Cross-Language Challenges Analysis Engine/AST-level Team/Lifecycle-level/invocation/audit/reporting? Packaging challenges
Scope What is the domain? Security or Quality, Education... ? What is the range of techniques? Syntax checking/Metrics/Whole Program Analysis What's different about Dynamic? What about quick-fix? Role of annotations? Are there any standards we can implement? CWE?

More Related Content

PPT
Automatic Traceability
PPTX
IEEE p1589 'ARLEM' virtual meeting, July 8, 2015
PDF
CMSC 330 QUIZ 4
PDF
Experiences of CMS selection
ODP
Software Testing - Day Two
PDF
Deep learning Type Inference for Dynamic Programming Languages
PDF
Seeing is Understanding: Debugging with the Multicore Visualizer
ODP
Code Analysis and Refactoring with CDT
Automatic Traceability
IEEE p1589 'ARLEM' virtual meeting, July 8, 2015
CMSC 330 QUIZ 4
Experiences of CMS selection
Software Testing - Day Two
Deep learning Type Inference for Dynamic Programming Languages
Seeing is Understanding: Debugging with the Multicore Visualizer
Code Analysis and Refactoring with CDT
Ad

EclipseCon Static Analysis BOF

  • 1. Static Analysis BOF Thought experiment: A coherent Eclipse narrative about Static Analysis Mike Norman
  • 2. Existing Tools and Platforms Where does it sit? TPTP, PTP, CDT(Codan), JDT? 3rd-party tool integration Open Source e.g. Findbugs Commercial e.g. CodePro Research Prototypes e.g. Proof General Are there benefits to tools integration? Cross-Language Challenges Analysis Engine/AST-level Team/Lifecycle-level/invocation/audit/reporting? Packaging challenges
  • 3. Scope What is the domain? Security or Quality, Education... ? What is the range of techniques? Syntax checking/Metrics/Whole Program Analysis What's different about Dynamic? What about quick-fix? Role of annotations? Are there any standards we can implement? CWE?