Automated Repair of Static Analysis Alerts

Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), David Svoboda, a software security engineer in the SEI’s CERT Division, discusses Redemption, a new open source tool from the SEI that automatically repairs common errors in C/C++ code generated from static analysis alerts, making code safer and static analysis less overwhelming.
#static-analysis, #software, #assurance, #CERT, #coding, #cybersecurity, #opensource, #C, #C++‪@TheSEICMU‬
The SEI Podcast Series is available sei.cmu.edu/podcasts and on the following channels:
Apple Podcasts: podcasts.apple...
TuneIn: tunein.com/pod...
SoundCloud: / cmu-sei-podcasts
Spotify: open.spotify.c...