{"id":"https://openalex.org/W2158297335","doi":"https://doi.org/10.1109/msp.2004.111","title":"Static analysis for security","display_name":"Static analysis for security","publication_year":2004,"publication_date":"2004-11-01","ids":{"openalex":"https://openalex.org/W2158297335","doi":"https://doi.org/10.1109/msp.2004.111","mag":"2158297335"},"language":"en","primary_location":{"id":"doi:10.1109/msp.2004.111","doi":"https://doi.org/10.1109/msp.2004.111","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2004.111","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-b","jufo-2","norway-2","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security and Privacy Magazine","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019114842","display_name":"Brian Chess","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"B. Chess","raw_affiliation_strings":["Fortify Software"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fortify Software","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028925951","display_name":"Gary E. McGraw","orcid":"https://orcid.org/0000-0003-2307-2739","observed_orcids":["https://orcid.org/0000-0003-2307-2739"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"G. McGraw","raw_affiliation_strings":["Cigital, Inc"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cigital, Inc","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2995,"currency":"USD","value_usd":2995},"apc_paid":null,"fwci":12.738,"has_fulltext":false,"cited_by_count":477,"citation_normalized_percentile":{"value":0.98606326,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"2","issue":"6","first_page":"76","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5268999934196472,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5268999934196472,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3582000136375427,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.040300000458955765,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.8769999742507935},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.8679999709129333},{"id":"https://openalex.org/keywords/source-code-analysis","display_name":"source code analysis","score":0.8220000267028809},{"id":"https://openalex.org/keywords/automated-security-analysis","display_name":"automated security analysis","score":0.7390000224113464}],"concepts":[{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.7572411298751831},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7184923887252808},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.6724209785461426},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.6427215933799744},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.6398845911026001},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.537354588508606},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.4947454631328583},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4856956899166107},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4823029041290283},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.46513882279396057},{"id":"https://openalex.org/C121957198","wikidata":"https://www.wikidata.org/wiki/Q14365593","display_name":"KPI-driven code analysis","level":5,"score":0.44052404165267944},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.4266388416290283},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41922739148139954},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.4123699963092804},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.30681663751602173},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2542579174041748},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.1928863823413849},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.16405373811721802},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.14581596851348877},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.13500216603279114},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13440737128257751},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/msp.2004.111","doi":"https://doi.org/10.1109/msp.2004.111","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2004.111","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-b","jufo-2","norway-2","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security and Privacy Magazine","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1579850852","https://openalex.org/W1596552075","https://openalex.org/W1600965014","https://openalex.org/W1986453394","https://openalex.org/W1989657183","https://openalex.org/W2089139117","https://openalex.org/W2098465784","https://openalex.org/W2103714221","https://openalex.org/W2119736157","https://openalex.org/W2120138937","https://openalex.org/W2124477160","https://openalex.org/W2126513753","https://openalex.org/W2156268601","https://openalex.org/W2169476734","https://openalex.org/W2294407885","https://openalex.org/W4230796557"],"related_works":["https://openalex.org/W2098465784","https://openalex.org/W2088069056","https://openalex.org/W7171328914","https://openalex.org/W6998980221","https://openalex.org/W2066375924","https://openalex.org/W2242428984","https://openalex.org/W2092317965","https://openalex.org/W4390598056","https://openalex.org/W2290790037","https://openalex.org/W7055230283"],"abstract_inverted_index":{"All":[0],"software":[1,29],"projects":[2],"are":[3],"guaranteed":[4],"to":[5,37],"have":[6],"one":[7],"artifact":[8],"in":[9],"common":[10],"$source":[11],"code.":[12],"Together":[13],"with":[14,42],"architectural":[15],"risk":[16],"analysis,":[17],"code":[18],"review":[19],"for":[20],"security":[21,30,40],"ranks":[22],"very":[23],"high":[24],"on":[25],"the":[26],"list":[27],"of":[28],"best":[31],"practices.":[32],"We":[33],"look":[34],"at":[35],"how":[36],"automate":[38],"source-code":[39],"analysis":[41,44],"static":[43],"tools.":[45]},"counts_by_year":[{"year":2026,"cited_by_count":42},{"year":2025,"cited_by_count":40},{"year":2024,"cited_by_count":21},{"year":2023,"cited_by_count":26},{"year":2022,"cited_by_count":28},{"year":2021,"cited_by_count":36},{"year":2020,"cited_by_count":33},{"year":2019,"cited_by_count":20},{"year":2018,"cited_by_count":30},{"year":2017,"cited_by_count":17},{"year":2016,"cited_by_count":14},{"year":2015,"cited_by_count":19},{"year":2014,"cited_by_count":20},{"year":2013,"cited_by_count":18},{"year":2012,"cited_by_count":17}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}