Why Don't Software Developers Use Static Analysis Tools to Find Bugs?. Johnson, B., Song, Y., Murphy-Hill, E., & Bowdidge, R. In Proceedings of the 2013 International Conference on Software Engineering (ICSE), of ICSE '13, pages 672–681, Piscataway, NJ, USA, 2013. IEEE Press.
Paper doi abstract bibtex 2 downloads Using static analysis tools for automating code inspections can be beneficial for software engineers. Such tools can make finding bugs, or software defects, faster and cheaper than manual inspections. Despite the benefits of using static analysis tools to find bugs, research suggests that these tools are underused. In this paper, we investigate why developers are not widely using static analysis tools and how current tools could potentially be improved. We conducted interviews with 20 developers and found that although all of our participants felt that use is beneficial, false positives and the way in which the warnings are presented, among other things, are barriers to use. We discuss several implications of these results, such as the need for an interactive mechanism to help developers fix defects.
@inproceedings{Johnson2013Why,
abstract = {{Using static analysis tools for automating code inspections can be beneficial for software engineers. Such tools can make finding bugs, or software defects, faster and cheaper than manual inspections. Despite the benefits of using static analysis tools to find bugs, research suggests that these tools are underused. In this paper, we investigate why developers are not widely using static analysis tools and how current tools could potentially be improved. We conducted interviews with 20 developers and found that although all of our participants felt that use is beneficial, false positives and the way in which the warnings are presented, among other things, are barriers to use. We discuss several implications of these results, such as the need for an interactive mechanism to help developers fix defects.}},
address = {Piscataway, NJ, USA},
author = {Johnson, Brittany and Song, Yoonki and Murphy-Hill, Emerson and Bowdidge, Robert},
booktitle = {Proceedings of the 2013 International Conference on Software Engineering (ICSE)},
citeulike-article-id = {12716870},
citeulike-linkout-0 = {http://dx.doi.org/10.1109/ICSE.2013.6606613},
citeulike-linkout-1 = {http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf},
citeulike-linkout-2 = {http://portal.acm.org/citation.cfm?id=2486877},
doi = {10.1109/ICSE.2013.6606613},
isbn = {978-1-4673-3076-3},
keywords = {program\_analysis, self},
location = {San Francisco, CA, USA},
pages = {672--681},
posted-at = {2013-10-16 16:58:32},
priority = {2},
publisher = {IEEE Press},
series = {ICSE '13},
title = {{Why Don't Software Developers Use Static Analysis Tools to Find Bugs?}},
url = {http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf},
year = {2013},
howpublished = {2. Conference},
}
Downloads: 2
{"_id":"yfKyYPEdLFgNE89fm","bibbaseid":"johnson-song-murphyhill-bowdidge-whydontsoftwaredevelopersusestaticanalysistoolstofindbugs-2013","downloads":2,"creationDate":"2017-02-09T04:44:06.097Z","title":"Why Don't Software Developers Use Static Analysis Tools to Find Bugs?","author_short":["Johnson, B.","Song, Y.","Murphy-Hill, E.","Bowdidge, R."],"year":2013,"bibtype":"inproceedings","biburl":"https://raw.githubusercontent.com/DeveloperLiberationFront/bibtex-library/master/our-papers.bib","bibdata":{"bibtype":"inproceedings","type":"inproceedings","abstract":"Using static analysis tools for automating code inspections can be beneficial for software engineers. Such tools can make finding bugs, or software defects, faster and cheaper than manual inspections. Despite the benefits of using static analysis tools to find bugs, research suggests that these tools are underused. In this paper, we investigate why developers are not widely using static analysis tools and how current tools could potentially be improved. We conducted interviews with 20 developers and found that although all of our participants felt that use is beneficial, false positives and the way in which the warnings are presented, among other things, are barriers to use. We discuss several implications of these results, such as the need for an interactive mechanism to help developers fix defects.","address":"Piscataway, NJ, USA","author":[{"propositions":[],"lastnames":["Johnson"],"firstnames":["Brittany"],"suffixes":[]},{"propositions":[],"lastnames":["Song"],"firstnames":["Yoonki"],"suffixes":[]},{"propositions":[],"lastnames":["Murphy-Hill"],"firstnames":["Emerson"],"suffixes":[]},{"propositions":[],"lastnames":["Bowdidge"],"firstnames":["Robert"],"suffixes":[]}],"booktitle":"Proceedings of the 2013 International Conference on Software Engineering (ICSE)","citeulike-article-id":"12716870","citeulike-linkout-0":"http://dx.doi.org/10.1109/ICSE.2013.6606613","citeulike-linkout-1":"http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf","citeulike-linkout-2":"http://portal.acm.org/citation.cfm?id=2486877","doi":"10.1109/ICSE.2013.6606613","isbn":"978-1-4673-3076-3","keywords":"program_analysis, self","location":"San Francisco, CA, USA","pages":"672–681","posted-at":"2013-10-16 16:58:32","priority":"2","publisher":"IEEE Press","series":"ICSE '13","title":"Why Don't Software Developers Use Static Analysis Tools to Find Bugs?","url":"http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf","year":"2013","howpublished":"2. Conference","bibtex":"@inproceedings{Johnson2013Why,\n abstract = {{Using static analysis tools for automating code inspections can be beneficial for software engineers. Such tools can make finding bugs, or software defects, faster and cheaper than manual inspections. Despite the benefits of using static analysis tools to find bugs, research suggests that these tools are underused. In this paper, we investigate why developers are not widely using static analysis tools and how current tools could potentially be improved. We conducted interviews with 20 developers and found that although all of our participants felt that use is beneficial, false positives and the way in which the warnings are presented, among other things, are barriers to use. We discuss several implications of these results, such as the need for an interactive mechanism to help developers fix defects.}},\n address = {Piscataway, NJ, USA},\n author = {Johnson, Brittany and Song, Yoonki and Murphy-Hill, Emerson and Bowdidge, Robert},\n booktitle = {Proceedings of the 2013 International Conference on Software Engineering (ICSE)},\n citeulike-article-id = {12716870},\n citeulike-linkout-0 = {http://dx.doi.org/10.1109/ICSE.2013.6606613},\n citeulike-linkout-1 = {http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf},\n citeulike-linkout-2 = {http://portal.acm.org/citation.cfm?id=2486877},\n doi = {10.1109/ICSE.2013.6606613},\n isbn = {978-1-4673-3076-3},\n keywords = {program\\_analysis, self},\n location = {San Francisco, CA, USA},\n pages = {672--681},\n posted-at = {2013-10-16 16:58:32},\n priority = {2},\n publisher = {IEEE Press},\n series = {ICSE '13},\n title = {{Why Don't Software Developers Use Static Analysis Tools to Find Bugs?}},\n url = {http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf},\n year = {2013},\n howpublished = {2. Conference},\n}\n\n","author_short":["Johnson, B.","Song, Y.","Murphy-Hill, E.","Bowdidge, R."],"key":"Johnson2013Why","id":"Johnson2013Why","bibbaseid":"johnson-song-murphyhill-bowdidge-whydontsoftwaredevelopersusestaticanalysistoolstofindbugs-2013","role":"author","urls":{"Paper":"http://people.engr.ncsu.edu/ermurph3/papers/icse13b.pdf"},"keyword":["program_analysis","self"],"metadata":{"authorlinks":{"murphy-hill, e":"https://people.engr.ncsu.edu/"}},"downloads":2,"html":""},"search_terms":["don","software","developers","use","static","analysis","tools","find","bugs","johnson","song","murphy-hill","bowdidge"],"keywords":["program_analysis","self"],"authorIDs":["4KwxDBamuQtjZni7K","55jJ2Lc9v3TK3fHns","589bfd0d45eb15981e000020","5YhXs8cRYCk6k3iGv","5dea527bddb5e6df010000a3","5dee7c55fc4c19df01000071","5df1b6c280f800de010000c9","5df3c413580920de01000077","5df3cf5b580920de0100013c","5df75925182af9de010001c6","5df783da5c8a36df01000095","5df8c900e6b510df0100019f","5df9d65f38a7afde01000075","5dfa9f9e669fc3df01000117","5dfafdf4a8dc13ee01000006","5dfd0c6fea1680de010000eb","5dfd2ddbece35ede01000177","5e00e186ea72ecdf010000af","5e00f5ec08c773de0100008f","5e0268302862b0de0100005e","5e026e2a2862b0de0100009b","5e02d7ae410ebcdf0100004c","5e041ae10fe3b7df010000b3","5e0de74f45d2fdde0100002b","5e12c19270e2c4f201000036","5e16042df67f7dde01000002","5e199a2b204503de0100007c","5e1a3d583a430ede010000a0","5e1f6763e8f5ddde01000146","5e2544d3561b8fde010000d7","5e262ca924c8a6de0100001d","5e35bc1487b1e1de010000ec","5e37ad97e84c4cf201000098","5e395ebffa3db5df01000124","5e3ace07f2a00cdf010001bd","5e4171c6d9f47bee010000d1","5e419c768491fadf010001cf","5e43cf0944c4f9df01000209","5e4455ebdf3c2af301000147","5e4d8cf7d2986bde01000154","5e51fbb58240c0df0100009c","5e5479f47f0f44de010000b9","5e5578dbe11ab9df010000d5","5e5d5d8ead47bcde010000cc","5e5feab35241b5de01000143","5e6016dbc064fcde010000c2","5e68e6e11a389bdf010001b3","6eTKqREGJrtq3tnZM","92u6mdCESihxh5ntL","9Qn2KzwH4WFGGPWa9","B7z3EKM6rNLDciXyM","BAXJ53MbTC8abhDwT","BHZMAgT3vhzXztYx9","C8QbMbtPPmy5DJwob","CHgxzmxzLHAL8GixP","DApKEKiXriLAseHCr","DYPjRfegsNR67woei","DhNETDpyEfBLpDf8C","DxEpvEgCZXrTmM6zj","EaPBxKZtEb5N8XgYD","FbQupDQXSSAgeoh5g","FintF329QJDpJWzTh","HDDcxPQiEQ944E3Au","HHEAmTDo7JZq9W7ZT","J29cuzotXhgK8bpb6","L2osMpNGAwn4NHjbb","LWfjwfjFPJHTTbTZA","LtiopnrELztGZFoiC","Pi54RN6KBzHGyDRnB","QH73YvgT48mEmYDnk","QXKgqpsqwTHfpC9Fi","SHJmdvyYiEBK9YQpz","SgMxqhouqxL8tMaus","SsvgmxmW93nQJKPfZ","TBq5krjwGNocRMbts","TFrrbLLCHcXMBdgc3","X5DGgTpnyTyPR7a5h","XeRQ7NpnZP6ZNr2vP","bBgpuShQZoAvyP6EY","btpyAF3Me8PunuGHa","cqvH7qYjg2CFDbs3C","cxBWjbyTwmeZL6j3M","czdG4YkZnTSCYyg7T","drCZKqmYEKrJT2yDT","dxPqF7TGd2crSkpns","fEes37cobF4YfyMY6","gnbqqkoEbEPCmzvvJ","hYnuzdEe3swq9A4di","i2h4cFtAg2WwdjjyQ","ipRg8AW5QzftH2yCm","jG3oe6BXzhYySQ68L","kiLtLvgEdDfauDAcg","mmQQQL6xtzu2zz9iW","nXP7rWymg4cjcn44q","npiycu9QvjSqPAzjb","riPiKvw9a7fgwfH4F","sq2rTZrxzLgcY2zrc","t8DMAu4fGHoCFaLe5","ufMJtsYPDLDPZbTYS","ukoLMrPpXZy4574DM","vxhCcDCkuNgjF7H4X","x3qLc7DMPKF5FR8SA","yKJGc9aXvBwP4utwc"],"dataSources":["nHDichzRuRdGMsJQG","cfNfJKkdJZ7LeZWkg"]}