About
From developers to developers, let's explore together how do we find issues (code smells, bugs, vulnerabilities) in code using static analysis. In this presentation we will discuss the various techniques behind the many free and open-source Sonar language analyzers and products, from a purely technical angle, and answer the following questions:
What are the difficulties to understand a programming language?
What can we find with static analysis, and how?
What other techniques can we leverage on top of it to improve performance and/or precision? (for instance: "Context-Sensitive Path-Sensitive Dataflow Analysis", "REGEX Automata Generation", "Cross-Language Analysis")
And ultimately, once we found some (or tons of) issues, what should be the proper approach to fix them?
The talk
Credits and licence
- Institution
- CERN
- Department
- CERN Computing Seminar
- Taught by
- Michael Gumowski, Arseniy Zaostrovnykh
- Year
- 2022
- Language
- English
- Subjects
- Computer science
- Source
- CERN
- Licence
- CERN, as CERN states it. CERN's terms
- Attribution
- © CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
- Who can watch
- CERN gives no rating. Invisible Network shows it to Tweens profiles and older, judged from what the source says about it. How courses are placed