Finding Patterns in Static Analysis Alerts: Improving Actionable Alert Ranking

Static analysis;bug detection;alert classification;machine learning;alert patterns;Electrical and Computer Engineering (Software Engineering)

Hanam, Quinn

University of Waterloo

关键词: Static analysis;    bug detection;    alert classification;    machine learning;    alert patterns;    Electrical and Computer Engineering (Software Engineering);   

Others  :  https://uwspace.uwaterloo.ca/bitstream/10012/8753/3/Hanam_Quinn.pdf

瑞士|英语

来源: UWSPACE Waterloo Institutional Repository

【 摘 要 】

Static analysis (SA) tools that find bugs by inferring programmer beliefs (e.g., FindBugs) are commonplace in today’s software industry. While they find a large number of actual defects, they are often plagued by high rates of alerts that a developer would not act on (unactionable alerts) because they are incorrect, do not significantly affect program execution, etc. High rates of unactionable alerts decrease the utility of static analysis tools in practice.We present a method for differentiating actionable and unactionable alerts by finding alerts with similar code patterns. To do so, we create a feature vector based on code characteristics at the site of each SA alert. With these feature vectors, we use machine learning techniques to build an actionable alert prediction model that is able to classify new SA alerts.We evaluate our technique on three subject programs using the FindBugs static analysis tool and the FaultBench benchmark methodology. For a developer inspecting the top 5% of all alerts for three sample projects, our approach is able to identify 57 of 211 actionable alerts, which is 38 more than the FindBugs priority measure. Combined with previous actionable alert identification techniques, our method finds 75 actionable alerts in the top 5%, which is four more actionable alerts (a 6% improvement) than previous actionable alert identification techniques.