.png){kind=icon}
返回
Evaluating C/C plus plus Vulnerability Detectability of Query-Based Static Application Security Testing Tools
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2024.3354789.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In recent years, query-based static application security testing(Q-SAST) tools such as CodeQL have gained popularity due to their ability to codify vulnerability knowledge into SQL-like queries and search for vulnerabilities in the database derived from the software. The industry has made considerable progress in building Q-SAST tools, facilitating their integration into the continuous integration (CI) pipeline, and sustaining an active community. However, we do not have a systematic understanding of their vulnerability detection capability in comparison to conventional SAST tools. We conduct the first in-depth study of Q-SAST to demystify their C/C++ vulnerability detectability. Our study is conducted from three complementary aspects. We first use a synthetic CWE test suite and a real-world CVE test suite, totaling almost 30 K programs with known CWE/CVE, to assess popular (commercial) Q-SAST and industry-leading SAST (requiring no queries). Then, we gather defect-fixing pull requests (PRs) since the release dates of three popular Q-SAST tools, characterizing historically-fixed defects and comparing them to pitfalls exposed in our CWE/CVE study. To enhance vulnerability detection, we design SAST-MT, a metamorphic testing framework to detect false positives (FPs) and false negatives (FNs) of Q-SAST. Findings of SAST-MT can be used to easily expose the root causes of Q-SAST's FPs and FNs. We summarize lessons from our study that can benefit both users and developers of Q-SAST.
Keyword:
Software
Databases
Security
Computer bugs
Codes
Testing
Software development management
SAST
static analysis
vulnerability detection
期刊
IF:
7.5
论文数:
2.5K
被引数:
9.6K
机构
暂无机构信息
引用论文
.png){kind=icon}
分享收藏
Systematic Mutation-Based Evaluation of the Soundness of Security-Focused Android Static Analysis Techniques基于系统突变的以安全为中心的Android静态分析技术的合理性评估
OAAI
OAAI分享收藏
查看更多内容