Automated Repair of Static Analysis Alerts

Software Engineering Institute (SEI) Podcast Series

Innhold levert av Carnegie Mellon University Software Engineering Institute and Members of Technical Staff at the Software Engineering Institute. Alt podcastinnhold, inkludert episoder, grafikk og podcastbeskrivelser, lastes opp og leveres direkte av Carnegie Mellon University Software Engineering Institute and Members of Technical Staff at the Software Engineering Institute eller deres podcastplattformpartner. Hvis du tror at noen bruker det opphavsrettsbeskyttede verket ditt uten din tillatelse, kan du følge prosessen skissert her https://no.player.fm/legal.

6M ago 27:05

MP3•Episoder hjem

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on October 11, 2024 16:02 (1M ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), David Svoboda, a software security engineer in the SEI’s CERT Division, discusses Redemption, a new open source tool from the SEI that automatically repairs common errors in C/C++ code generated from static analysis alerts, making code safer and static analysis less overwhelming.

430 episoder

#Engineering #Business #Science #Tech #Artificialintelligenceengineering #Cybersecurity #Futuretech #Softwareengineering #Carnegie Mellon University Software Engineering Institute #Members of Technical Staff at the Software Engineering Institute #Industries