 |
This figure is the result of static analysis for binary search code implemented according to case 4. The overflow checker generates an alarm. The code implemented according to case 4 satisfies security but not reliability. When an alarm occurs, developers or test engineers analyze the code for that alarm and determine if it is the true positive or false positive. The developer or test engineer of the reliability-oriented group judges the result of this figure as true positive. The developer or test engineer of the security-oriented group determines the result of this figure as false positive. |
IEEE/ICACT20210212 Slide.15
[Big Slide]