Comparison and evaluation on Static Application Security Testing (SAST) tools for Java

• Main Authors: LI, Kaixuan, CHEN, Sen, FAN, Lingling, FENG, Ruitao, LIU, Han, LIU, Chengwei, LIU, Yang, CHEN, Yixiang
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Benchmarks; Empirical study; Static application security testing; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/8976; https://ink.library.smu.edu.sg/context/sis_research/article/9979/viewcontent/fse2023_sast_pv.pdf
• Institution: Singapore Management University

Static application security testing (SAST) takes a significant role in the software development life cycle (SDLC). However, it is challenging to comprehensively evaluate the effectiveness of SAST tools to determine which is the better one for detecting vulnerabilities. In this paper, based on well-d...