3 papers · 1 filter
Enhancing Code Review through Fuzzing and Likely Invariants
Wachiraphan Charoenwet, Patanamon Thongtanunam, Van-Thuan Pham +1
Many software projects employ manual code review to gatekeep defects and vulnerabilities in the code before integration. However, reviewers often work under time pressure and rely…
An Empirical Study of Static Analysis Tools for Secure Code Review
Wachiraphan Charoenwet, Patanamon Thongtanunam, Van-Thuan Pham +1
Early identification of security issues in software development is vital to minimize their unanticipated impacts. Code review is a widely used manual analysis method that aims to u…
Toward Effective Secure Code Reviews: An Empirical Study of Security-Related Coding Weaknesses
Wachiraphan Charoenwet, Patanamon Thongtanunam, Van-Thuan Pham +1
Identifying security issues early is encouraged to reduce the latent negative impacts on software systems. Code review is a widely-used method that allows developers to manually in…