SYSTEM AND METHOD FOR CAUSE POINT ANALYSIS FOR EFFECTIVE HANDLING OF STATIC ANALYSIS ALARMS

摘要

PROBLEM TO BE SOLVED: To provide a method and system for identifying causes of alarms generated in association with each alarm of a static analysis.SOLUTION: A system models alarm cause points of several types using reasons for alarms as a base to identify causes of alarms generated in association with each alarm of a static analysis. The system ranks these cause points based on unknown type-based ranking, grouping of cause points based on their lexical similarity or proximity, or contribution score based ranking based on different metrics. The system also uses a workflow in which a user answers queries about the cause points, and the answers are used in subsequent round of the static analysis. The collaboration between the answers of the user and the static analysis helps a tool to resolve unknowns encountered during the static analysis and weed out alarms, and helps manual inspections of alarms.SELECTED DRAWING: Figure 1