Static analysis-based approaches for secure software development

File Description SizeFormat 
2018_Book_SecurityInComputerAndInformati(2)-153-168.pdfPublished version205.4 kBAdobe PDFView/Open
Title: Static analysis-based approaches for secure software development
Authors: Siavvas, M
Gelenbe, E
Kehagias, D
Tzovaras, D
Item Type: Conference Paper
Abstract: Software security is a matter of major concern for software development enterprises that wish to deliver highly secure software products to their customers. Static analysis is considered one of the most effective mechanisms for adding security to software products. The multitude of static analysis tools that are available provide a large number of raw results that may contain security-relevant information, which may be useful for the production of secure software. Several mechanisms that can facilitate the production of both secure and reliable software applications have been proposed over the years. In this paper, two such mechanisms, particularly the vulnerability prediction models (VPMs) and the optimum checkpoint recommendation (OCR) mechanisms, are theoretically examined, while their potential improvement by using static analysis is also investigated. In particular, we review the most significant contributions regarding these mechanisms, identify their most important open issues, and propose directions for future research, emphasizing on the potential adoption of static analysis for addressing the identified open issues. Hence, this paper can act as a reference for researchers that wish to contribute in these subfields, in order to gain solid understanding of the existing solutions and their open issues that require further research.
Editors: Gelenbe, E
Campegiani, P
Czachorski, T
Katsikas, SK
Komnios, I
Romano, L
Tzovaras, D
Issue Date: 14-Jul-2018
Date of Acceptance: 26-Feb-2018
ISBN: 9783319951881
ISSN: 1865-0929
Publisher: Springer-Verlag Berlin
Start Page: 142
End Page: 157
Journal / Book Title: Security in Computer and Information Sciences
Volume: 821
Copyright Statement: © 2018 The Author(s). This chapter is licensed under the terms of the Creative Commons Attribution 4.0 International License (, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.
Sponsor/Funder: European Commission Directorate-General for Research and Innovation
Commission of the European Communities
Funder's Grant Number: EU H2020 Framework Prog. R & Innovation Grant Agreement 727528
Conference Name: 32nd International Symposium on Computer and Information Sciences (ISCIS) on Cybersecurity (Euro-CYBERSEC)
Keywords: Software security
Static analysis
Vulnerability prediction
Checkpoint and Restart
Publication Status: Published
Start Date: 2018-02-26
Finish Date: 2018-02-27
Conference Place: Imperial Coll London, London, England
Online Publication Date: 2018-07-14
Appears in Collections:Faculty of Engineering
Electrical and Electronic Engineering

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.

Creative Commons