Search

Home > Software Engineering Institute (SEI) Podcast Series > Automated Repair of Static Analysis Alerts
Podcast: Software Engineering Institute (SEI) Podcast Series
Episode:

Automated Repair of Static Analysis Alerts

Category: Technology
Duration: 00:27:05
Publish Date: 2024-05-31 17:29:56
Description:

Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), David Svoboda, a software security engineer in the SEI’s CERT Division, discusses Redemption, a new open source tool from the SEI that automatically repairs common errors in C/C++ code generated from static analysis alerts, making code safer and static analysis less overwhelming.

Total Play: 0