KJCKorea
Journal Central

@article{ART002210265},
author={Hyunji Seo and Younggwan Park and Kim Taehwan and Han, Kyung sook and Changwoo Pyo},
title={Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites},
journal={Journal of The Korea Society of Computer and Information},
issn={1598-849X},
year={2017},
volume={22},
number={3},
pages={17-25},
doi={10.9708/jksci.2017.22.03.017}

TY - JOUR
AU - Hyunji Seo
AU - Younggwan Park
AU - Kim Taehwan
AU - Han, Kyung sook
AU - Changwoo Pyo
TI - Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites
JO - Journal of The Korea Society of Computer and Information
PY - 2017
VL - 22
IS - 3
PB - The Korean Society Of Computer And Information
SP - 17
EP - 25
SN - 1598-849X
AB - In this paper, we compared four analyzers Clang, CppCheck, Compass, and a commercial one from a domestic startup using the NIST’s Juliet test suit and STONESOUP that is introduced recently. Tools showed detection efficacy in the order of Clang, CppCheck, the domestic one, and Compass under Juliet tests; and Clang, the domestic one, Compass, and CppCheck under STONESOUP tests. We expect it would be desirable to utilize symbolic execution for vulnerability analysis in the future. On the other hand, the results of tool evaluation also testifies that Juliet and STONESOUP as a benchmark for static analysis tools can reveal differences among tools. Finally, each analyzer has different CWEs that it can detect all given test programs. This result can be used for selection of proper tools with respect to specific CWEs.
KW - Static Analyzer;Software Weakness;C/C++ Program;JULIET Test Suite;STONESOUP
DO - 10.9708/jksci.2017.22.03.017
ER -

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook and Changwoo Pyo. (2017). Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites. Journal of The Korea Society of Computer and Information, 22(3), 17-25.

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook and Changwoo Pyo. 2017, "Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites", Journal of The Korea Society of Computer and Information, vol.22, no.3 pp.17-25. Available from: doi:10.9708/jksci.2017.22.03.017

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook, Changwoo Pyo "Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites" Journal of The Korea Society of Computer and Information 22.3 pp.17-25 (2017) : 17.

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook, Changwoo Pyo. Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites. 2017; 22(3), 17-25. Available from: doi:10.9708/jksci.2017.22.03.017

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook and Changwoo Pyo. "Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites" Journal of The Korea Society of Computer and Information 22, no.3 (2017) : 17-25.doi: 10.9708/jksci.2017.22.03.017

Hyunji Seo; Younggwan Park; Kim Taehwan; Han, Kyung sook; Changwoo Pyo. Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites. Journal of The Korea Society of Computer and Information, 22(3), 17-25. doi: 10.9708/jksci.2017.22.03.017

Hyunji Seo; Younggwan Park; Kim Taehwan; Han, Kyung sook; Changwoo Pyo. Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites. Journal of The Korea Society of Computer and Information. 2017; 22(3) 17-25. doi: 10.9708/jksci.2017.22.03.017

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook, Changwoo Pyo. Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites. 2017; 22(3), 17-25. Available from: doi:10.9708/jksci.2017.22.03.017

Hyunji Seo, Younggwan Park, Kim Taehwan, Han, Kyung sook and Changwoo Pyo. "Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites" Journal of The Korea Society of Computer and Information 22, no.3 (2017) : 17-25.doi: 10.9708/jksci.2017.22.03.017