How Code Analyzers Find Bugs and Security Defects
summary
Explains how static code analyzers detect bugs and security defects in Java code by describing different analysis types, their complementarities and limitations, and showing real-project examples of errors. Also covers practical integration of analyzers into development processes.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:07Why static analysis
- 8:08How analyzers see code
- 20:54Code analysis types
- 33:36Security and injections
- 42:18Next steps
- 45:50Bonus training
related talks
45mAnalyze This
42mStatic analysis as an answer to raising code quality
58mSecurity Static Analysis - Avoiding an Angry Mob of Engineers
42mSecure or Insecure Code, That Is the Question
36mThe art of static code analysis
40mChoosing The Right Static Code Analyzers Based On Hard Data
05mWhy Can't Johnny Fix Vulnerabilities: A Usability Evaluation of Static Analysis Tools
38mStatic Code Analysis - A Behind-the-scenes Look