Recommendations for the use of static code information analyzers

Authors

I.O. Dudnik

Keywords:

information security; static code analysis; code analyzer

Abstract

In the qualification (bachelor's) work based on the analysis of the functionality and characteristics of static code analyzers in IS provision, but based on the evaluation of the proposed criteria, it is shown that static analyzers such as DeepSource, SonarQube and Cast can be recommended as the most applicable. According to the results of model code testing, DeepSource can be recommended as the best static code analyzer among those tested.