Authors:

Zeyad Aljaali

Date Created:

Not specified

Course Title:

Professor:

Not specified

About Paper:

This study investigates the effectiveness of utilizing static analysis tools, namely CodeQL and the alpha-omega analyzer, for securing open source software projects. The goal of this research is to identify potential vulnerabilities within these open source systems, emphasizing the need for improved code security. This paper demonstrates how existing static analysis tools can be employed and, if necessary, modified or customized, to cater to the unique requirements of each project. The research provides a comparative analysis of the tools' capabilities and efficacy, providing practical guidelines for their application. The outcomes of this research offer critical insights for developers and open-source communities, advocating for a proactive, preventive approach towards securing software projects, thereby reducing susceptibility to potential cyber threats.

Source:

Purdue University / 2023

Topics:

No topics listed

Co-authors:

Zeyad Aljaali