An Empirical Study of Rule-Based and Learning-Based Approaches for Static Application Security Testing

Roland Croft, Dominic Newlands, Ziyu Chen +1

Background: Static Application Security Testing (SAST) tools purport to assist developers in detecting security issues in source code. These tools typically use rule-based approach…