Content Details
Impact of Code Complexity on Software Analysis
- Publication Title
- Impact of Code Complexity on Software Analysis
- Series Title
- NIST Interagency or Internal Reports
- Personal Author
- De Oliveira, Charles D.
- Publication Number
- NIST IR; NIST interagency report; NIST internal report; 8165
- Date Issued
- 2017
- Subject
- Computer software
Software testing
Code complexity
Test cases
Static source code scanner
Vulnerability
Software assurance
- Government Author
- Commerce Department, National Institute of Standards and Technology (NIST) .
- Category
- Executive Agency Publications
- SuDoc Class Number
- C 13.
- Abstract
- The Software Assurance Metrics and Tool Evaluation (SAMATE) team evaluated approximately 800 000 warnings from static analyzers.We learned that elements that we call "code complexities" make the detection of warnings more difficult. Most tools cannot not distinguish between the absence of a weakness and the presence of a weakness. That has been obscured in the code. This paper presents classes of code complexities. Understanding code complexity can assist in the development of coding guidelines for assuring that software is fully analyzable by static analyzers.
Loading...
Loading...