Static Analysis
Blog Posts
Evaluating Static Analysis Alerts with LLMs
LLMs show promising initial results in adjudicating static analysis alerts, offering possibilities for better vulnerability detection. This post discusses initial experiments using GPT-4 to evaluate static analysis alerts.
Read More• By William Klieber , Lori Flynn
In Cybersecurity Engineering
Redemption: A Prototype for Automated Repair of Static Analysis Alerts
This post introduces Redemption, an open source tool that uses automated code repair technology to repair static analysis alerts in C/C++ source code.
Read More• By David Svoboda
In Cybersecurity Engineering
Release of SCAIFE System Version 2.0.0 Provides Support for Continuous-Integration (CI) Systems
Key features in new release of SCAIFE System Version 2.0.0 including support for continuous-integration (CI) systems, and status of evolving SEI SCAIFE work
Read More• By Lori Flynn
In Secure Development
How to Use Static Analysis to Enforce SEI CERT Coding Standards for IoT Applications
The Jeep hack, methods to hack ATMs, and even hacks to a casino's fish tank provide stark evidence of the risks associated with the Internet of Things (IoT)....
Read More• By David Svoboda
In Secure Development
A Fighting Chance: Arming the Analyst in the Age of Big Data
The 2017 SEI Year in Review highlights the work of the institute undertaken from October 1, 2016, to September 30, 2017. This blog post, which was published in the 2017 …
Read More• By Douglas Schmidt (Vanderbilt University)
Verifying Evolving Software
This SEI Blog post explores the challenges of verifying evolving software and presents research efforts aimed at improving verification techniques and tools.
Read More• By Arie Gurfinkel
Regression Verification for Real-time Embedded Software Systems
The DoD relies heavily on mission- and safety-critical real-time embedded software systems (RTESs), which play a crucial role in controlling systems ranging from airplanes and cars to infusion pumps and …
Read More• By Arie Gurfinkel