An Extensive Comparison of Static Application Security Testing Tools

arXiv:2403.09219v1 Announce Type: cross
Abstract: Context: Static Application Security Testing Tools (SASTTs) identify software vulnerabilities to support the security and reliability of software applications. Interestingly, several studies have suggested that alternative solutions may be more effective than SASTTs due to their tendency to generate false alarms, commonly referred to as low Precision. Aim: We aim to comprehensively evaluate SASTTs, setting a reliable benchmark for assessing and finding gaps in vulnerability identification mechanisms based on SASTTs or alternatives. Method: Our SASTTs …

alarms application applications application security application security testing application security testing tools arxiv context cs.cr cs.cy cs.se identify low may reliability security security testing software software applications software vulnerabilities solutions static application security testing studies support testing testing tools tools vulnerabilities