Next Article in Journal
The Influence of Large Variations in Fluid Density and Viscosity on the Resonance Characteristics of Tuning Forks Simulated by Finite Element Method
Previous Article in Journal
Assessment of the Aerodynamic and Aeroelastic Performance of Long-Span Twin-Box Bridges Based upon Multidimensional Surrogate Models
 
 
Font Type:
Arial Georgia Verdana
Font Size:
Aa Aa Aa
Line Spacing:
Column Width:
Background:
This is an early access version, the complete PDF, HTML, and XML versions will be available soon.
Article

A Method for Processing Static Analysis Alarms Based on Deep Learning

School of Cyber Security and Computer, Hebei University, Baoding 071002, China
*
Author to whom correspondence should be addressed.
Appl. Sci. 2024, 14(13), 5542; https://doi.org/10.3390/app14135542
Submission received: 26 April 2024 / Revised: 12 June 2024 / Accepted: 20 June 2024 / Published: 26 June 2024
(This article belongs to the Section Computing and Artificial Intelligence)

Abstract

Automatic static analysis tools (ASATs), also known as static analyzers, have demonstrated their significance and practicability in detecting software defects. ASATs assist developers to identify potential vulnerabilities, errors, and security hazards in source code without executing the software. As software systems grow in scale and complexity, ASATs are replacing manual security audits and becoming crucial for detecting issues in code. However, ASATs often generate numerous warnings with high false positive rates, while developers typically only take measures on a small portion of actionable alarms. To cope with this problem, we propose an innovative method that combines the pre-trained CodeBERT model and neural networks to reduce false positives detected by ASATs. Our approach was evaluated on the Defects4J dataset, which comprises 835 real-world software defects extracted from 17 open-source Java projects. The experimental results explicitly manifest the effectiveness in processing static analysis alarms. By employing a bidirectional recurrent neural network for context embeddings, our approach achieved an accuracy of 95.77% and an AUC score of 98.3%. This research enables developers to minimize false positive alarms and ensure a reasonable number of actionable warnings while guaranteeing software quality and security.
Keywords: static analysis; false alarms; deep learning static analysis; false alarms; deep learning

Share and Cite

MDPI and ACS Style

Tan, Y.; Tian, J. A Method for Processing Static Analysis Alarms Based on Deep Learning. Appl. Sci. 2024, 14, 5542. https://doi.org/10.3390/app14135542

AMA Style

Tan Y, Tian J. A Method for Processing Static Analysis Alarms Based on Deep Learning. Applied Sciences. 2024; 14(13):5542. https://doi.org/10.3390/app14135542

Chicago/Turabian Style

Tan, Yaodan, and Junfeng Tian. 2024. "A Method for Processing Static Analysis Alarms Based on Deep Learning" Applied Sciences 14, no. 13: 5542. https://doi.org/10.3390/app14135542

Note that from the first issue of 2016, this journal uses article numbers instead of page numbers. See further details here.

Article Metrics

Back to TopTop