Static Analysis for Humans
  • Blog
  • About
  • Legal Notice
  • LinkedIn
  • Twitter
  • RSS Feed
  • Reducing the Noise: Teaching Static Analysis new facts

    Reducing the Noise: Teaching Static Analysis new facts

    In this article, I share a simple trick that reduces warnings in your Static Analysis tool, without compromising safety. You will learn how to inject new facts into your Static Analyzer, which can save you many hours of review work, as well as… read more …

  • Error Absorption: When Static Analysis hides your bugs

    Error Absorption: When Static Analysis hides your bugs

    After Static Analysis has found a bug, it must make assumptions about how to continue the analysis. In this article, we learn about a common “filtering effect” and the pitfalls around it. At the end of this article, you will not only understand… read more …

  • Formal Methods: The strictest, most powerful kind of Static Analysis

    Formal Methods: The strictest, most powerful kind of Static Analysis

    Have you ever wished that you could find every bug in your software, fix each of them, and have a perfect piece of software? This article explains how this is possible with Formal Methods, why you might already use them without knowing it,… read more …

  • Static Analysis vs. GenAI: Who is the superior bug hunter?

    Static Analysis vs. GenAI: Who is the superior bug hunter?

    GenAI will not replace Static Analysis. Yes, GenAI can understand code in any language, and also knows about unsafe programming patterns. But it is not reliable enough to reason about bugs in your code, just like humans. Instead, it has other strengths that… read more …

  • Defensive Coding – its love story with Static Analysis

    Defensive Coding – its love story with Static Analysis

    Defensive coding improves software quality, but it has downsides. In this article we discuss why it fits well together with Static Analysis, and how both make each other stronger. The result is more robust software, and less warnings from your Static Analysis tool.… read more …

  • Stupid False Positives: Inevitable and cryptic, yet easy to fix

    Stupid False Positives: Inevitable and cryptic, yet easy to fix

    The big weakness of Static Analysis is, that it can throw needless warnings, even if our software is “perfect”. In this article, we learn why Static Analysis must do that, why it can be wiser to change your code instead of managing warnings,… read more …

  • What’s better – Static or Dynamic Analysis? The human answer…

    What’s better – Static or Dynamic Analysis? The human answer…

    Since there is “Static” Analysis, does “Dynamic” Analysis also exist? Yes, it does. However, Static Analysis is much better suited to help writing better software. It is truly independent from human limitations, and can easily be used during early development. But Dynamic Analysis… read more …

  • Panic: Memory Safety is less safe than you think

    Panic: Memory Safety is less safe than you think

    Memory safety is often tragically misunderstood. Claims like “it eliminates all memory errors” are at best misleading, and can be a recipe for disaster. In this article, I will explain what it really means, where it has limits, and why Static Analysis is… read more …

  • Under the Hood of Static Analysis, and how to boost your results

    Under the Hood of Static Analysis, and how to boost your results

    The idea of Static Analysis sounds simple: Read the code, check each line, and report the bad stuff. However, it is far from easy. In this article, we look at the challenges that it has to overcome, and dive a little bit into… read more …

  • What is Static Code Analysis?

    What is Static Code Analysis?

    In this article, you will learn what Static Analysis is, why it is loved and hated by developers at the same time, and how it can be used for writing better software or to annoy your colleagues. Imagine you have a tiny detective… read more …

1 2
Next Page
  • LinkedIn
  • Twitter
  • RSS Feed

Static Analysis for Humans