Evaluation of Static Analysis Tools for Finding Vulnerabilities in Java and C/C++ Source Code

Rahma Mahmood, Qusay H. Mahmoud

It is quite common for security testing to be delayed until after the software has been developed, but vulnerabilities may get noticed throughout the implementation phase and the e…