Research on source code safety defects based on static test tools
基于静态检测工具的源代码安全缺陷检测研究*

To cope with the problem of high false negatives and false positives in source code static analysis methods with a static test tool, this paper presented a static analysis detection method for safety defects detection based on several static test tools. This method made statistical analysis on the outcome of different static test tools, which greatly decreased the false negatives and false positives. It designed and implemented a scalable source code static analysis tool platform, and it was proved by experiment that this platform has a better performance with lower false negatives and false positives compared with one single static test tool.