<?xml version="1.0" encoding="ISO-8859-1"?><article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<front>
<journal-meta>
<journal-id>1909-8367</journal-id>
<journal-title><![CDATA[Entre Ciencia e Ingeniería]]></journal-title>
<abbrev-journal-title><![CDATA[Entre Ciencia e Ingenieria]]></abbrev-journal-title>
<issn>1909-8367</issn>
<publisher>
<publisher-name><![CDATA[Universidad Católica de Pereira]]></publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id>S1909-83672023000200009</article-id>
<article-id pub-id-type="doi">10.31908/19098367.2846</article-id>
<title-group>
<article-title xml:lang="en"><![CDATA[Static Code Analysis: A Tree of Science Review]]></article-title>
<article-title xml:lang="es"><![CDATA[Análisis de código estático: una revisión del árbol de la ciencia]]></article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Ruiz]]></surname>
<given-names><![CDATA[G. A.]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Robledo]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Morales]]></surname>
<given-names><![CDATA[H. H.]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
</contrib-group>
<aff id="Af1">
<institution><![CDATA[,Universidad Catolica Luis Amigó  ]]></institution>
<addr-line><![CDATA[Medellín ]]></addr-line>
<country>Colombia</country>
</aff>
<aff id="Af2">
<institution><![CDATA[,Universidad Catolica Luis Amigó  ]]></institution>
<addr-line><![CDATA[Manizales ]]></addr-line>
<country>Colombia</country>
</aff>
<aff id="Af3">
<institution><![CDATA[,Universidad Catolica Luis Amigó  ]]></institution>
<addr-line><![CDATA[Medellín ]]></addr-line>
<country>Colombia</country>
</aff>
<pub-date pub-type="pub">
<day>00</day>
<month>12</month>
<year>2023</year>
</pub-date>
<pub-date pub-type="epub">
<day>00</day>
<month>12</month>
<year>2023</year>
</pub-date>
<volume>17</volume>
<numero>34</numero>
<fpage>9</fpage>
<lpage>14</lpage>
<copyright-statement/>
<copyright-year/>
<self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_arttext&amp;pid=S1909-83672023000200009&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_abstract&amp;pid=S1909-83672023000200009&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_pdf&amp;pid=S1909-83672023000200009&amp;lng=en&amp;nrm=iso"></self-uri><abstract abstract-type="short" xml:lang="en"><p><![CDATA[Abstract Static Code Analysis (SA) is the process of finding vulnerabilities in software. This process has become popular and one of the most evaluated phases in the process of continuous integration of software. However, the literature is spread over different proposals and there is a lack of research that shows the main contributions and applications to this topic. The purpose of this paper is to identify the main conceptual contributions of SA using the Tree of Science algorithm. The results show three main branches of this area: machine learning for smell detection, actionable ranking techniques, and Technical alert tools. Artificial Intelligence has been transforming SA and programmers will have access to more sophisticated tools.]]></p></abstract>
<abstract abstract-type="short" xml:lang="es"><p><![CDATA[Resumen El análisis de código estático (SA) es el proceso de encontrar vulnerabilidades en el software. Este proceso se ha vuelto popular y una de las fases más evaluadas en el proceso de integración continua de software. Sin embargo, la literatura se encuentra dispersa en diferentes propuestas y faltan investigaciones que muestran las principales contribuciones y aplicaciones a este tema. El propósito de este artículo es identificar las principales contribuciones conceptuales de SA utilizando el algoritmo Tree of Science. Los resultados muestran tres ramas principales de esta área: aprendizaje automático para la detección de olores, técnicas de clasificación accionables y herramientas de alerta técnica. La Inteligencia Artificial ha estado transformando SA y los programadores tendrán acceso a herramientas más sofisticadas.]]></p></abstract>
<kwd-group>
<kwd lng="es"><![CDATA[análisis estático]]></kwd>
<kwd lng="es"><![CDATA[alertas]]></kwd>
<kwd lng="es"><![CDATA[errores]]></kwd>
<kwd lng="es"><![CDATA[defectos]]></kwd>
<kwd lng="es"><![CDATA[advertencias]]></kwd>
<kwd lng="es"><![CDATA[código fallido]]></kwd>
<kwd lng="en"><![CDATA[static analysis]]></kwd>
<kwd lng="en"><![CDATA[alert]]></kwd>
<kwd lng="en"><![CDATA[bug]]></kwd>
<kwd lng="en"><![CDATA[defect]]></kwd>
<kwd lng="en"><![CDATA[warning]]></kwd>
<kwd lng="en"><![CDATA[fault code]]></kwd>
</kwd-group>
</article-meta>
</front><back>
<ref-list>
<ref id="B1">
<label>[1]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Heckman]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Williams]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A systematic literature review of actionable alert identification techniques for automated static code analysis]]></article-title>
<source><![CDATA[Information and Software Technology]]></source>
<year>2011</year>
<volume>53</volume>
<numero>4</numero>
<issue>4</issue>
<page-range>363-87</page-range></nlm-citation>
</ref>
<ref id="B2">
<label>[2]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Kaur]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Jain]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Goel]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Dhiman]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A review on machine-learning based code smell detection techniques in object-oriented software system(s)]]></article-title>
<source><![CDATA[Recent Adv. Electr. Electron. Eng. (Former. Recent Pat. Electr. Electron. Eng.)]]></source>
<year>2021</year>
<volume>14</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>290-303</page-range></nlm-citation>
</ref>
<ref id="B3">
<label>[3]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Al-Shaaby]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Aljamaan]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Alshayeb]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Bad Smell Detection Using Machine Learning Techniques: A Systematic Literature Review]]></article-title>
<source><![CDATA[Arab. J. Sci. Eng]]></source>
<year>2020</year>
<volume>45</volume>
<numero>4</numero>
<issue>4</issue>
<page-range>2341-69</page-range></nlm-citation>
</ref>
<ref id="B4">
<label>[4]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Azeem]]></surname>
<given-names><![CDATA[M. I.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Shi]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Wang]]></surname>
<given-names><![CDATA[Q.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Machine learning techniques for code smell detection: A systematic literature review and meta-analysis]]></article-title>
<source><![CDATA[Information and Software Technology]]></source>
<year>2019</year>
<volume>108</volume>
<page-range>115-38</page-range></nlm-citation>
</ref>
<ref id="B5">
<label>[5]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Akremi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Software security static analysis false alerts handling approaches]]></article-title>
<source><![CDATA[Int. J. Adv. Comput. Sci. Appl]]></source>
<year>2021</year>
<volume>12</volume>
<numero>11</numero>
<issue>11</issue>
</nlm-citation>
</ref>
<ref id="B6">
<label>[6]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Valencia-Hernandez]]></surname>
<given-names><![CDATA[D. S.]]></given-names>
</name>
<name>
<surname><![CDATA[Robledo]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Pinilla]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Duque-Méndez]]></surname>
<given-names><![CDATA[N. D.]]></given-names>
</name>
<name>
<surname><![CDATA[Olivar-Tost]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[SAP Algorithm for Citation Analysis: An improvement to Tree of Science]]></article-title>
<source><![CDATA[Ing. Inv]]></source>
<year>2020</year>
<volume>40</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>45-9</page-range></nlm-citation>
</ref>
<ref id="B7">
<label>[7]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Zuluaga]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Robledo]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Osorio-Zuluaga]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Gonzalez]]></surname>
<given-names><![CDATA[L. Yathe]]></given-names>
</name>
</person-group>
<collab>Taborda</collab>
<article-title xml:lang=""><![CDATA[Metabolomics and pesticides: systematic literature review using graph theory for analysis of references]]></article-title>
<source><![CDATA[Nova]]></source>
<year>2016</year>
<volume>14</volume>
<numero>25</numero>
<issue>25</issue>
<page-range>121-38</page-range></nlm-citation>
</ref>
<ref id="B8">
<label>[8]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Moral-Muñoz]]></surname>
<given-names><![CDATA[J. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Herrera-Viedma]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Santisteban-Espejo]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Cobo]]></surname>
<given-names><![CDATA[M. J.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Software tools for conducting bibliometric analysis in science: An up-to-date review]]></article-title>
<source><![CDATA[EPI]]></source>
<year>2020</year>
<volume>29</volume>
<numero>1</numero>
<issue>1</issue>
</nlm-citation>
</ref>
<ref id="B9">
<label>[9]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Robledo]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Grisales Aguirre]]></surname>
<given-names><![CDATA[A. M.]]></given-names>
</name>
<name>
<surname><![CDATA[Hughes]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Eggers]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Hasta la vista, baby&#8217; - will machine learning terminate human literature reviews in entrepreneurship?]]></article-title>
<source><![CDATA[J. Small Bus. Manage]]></source>
<year>2021</year>
<page-range>1-30</page-range></nlm-citation>
</ref>
<ref id="B10">
<label>[10]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Duque]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
<name>
<surname><![CDATA[Oliva]]></surname>
<given-names><![CDATA[E. J. D.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Tendencias emergentes en la literatura sobre el compromiso del cliente: un análisis bibliométrico]]></article-title>
<source><![CDATA[Estudios Gerenciales]]></source>
<year>2022</year>
<page-range>120-32</page-range></nlm-citation>
</ref>
<ref id="B11">
<label>[11]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Torres]]></surname>
<given-names><![CDATA[Z. B.]]></given-names>
</name>
<name>
<surname><![CDATA[Penagos]]></surname>
<given-names><![CDATA[C. O. P.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Desarrollo tecnológico y de innovación en talleres de confección. Revisión de literatura]]></article-title>
<source><![CDATA[bol.redipe]]></source>
<year>2022</year>
<volume>11</volume>
<numero>6</numero>
<issue>6</issue>
<page-range>211-24</page-range></nlm-citation>
</ref>
<ref id="B12">
<label>[12]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Castellanos]]></surname>
<given-names><![CDATA[J. D. G.]]></given-names>
</name>
<name>
<surname><![CDATA[Hurtado]]></surname>
<given-names><![CDATA[P. L. D.]]></given-names>
</name>
<name>
<surname><![CDATA[Barahona]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Peña]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Marco de referencia y tendencias de investigación de economía colaborativa]]></article-title>
<source><![CDATA[REC]]></source>
<year>2022</year>
<volume>10</volume>
<numero>16</numero>
<issue>16</issue>
<page-range>267-92</page-range></nlm-citation>
</ref>
<ref id="B13">
<label>[13]</label><nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Landínez-Martínez]]></surname>
<given-names><![CDATA[D. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Arias-Valencia]]></surname>
<given-names><![CDATA[J. F.]]></given-names>
</name>
<name>
<surname><![CDATA[Gómez-Tabares]]></surname>
<given-names><![CDATA[A. S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Executive Dysfunction in Adolescent with Obesity: A Systematic Review]]></article-title>
<source><![CDATA[psykhe]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B14">
<label>[14]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[González-Mendoza]]></surname>
<given-names><![CDATA[J. A.]]></given-names>
</name>
<name>
<surname><![CDATA[M. Calderon-Contreras]]></surname>
<given-names><![CDATA[M. del]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Teletrabajo y sus impactos: una revisión y análisis bibliométrico]]></article-title>
<source><![CDATA[Aibi revista investig. adm. ing]]></source>
<year>2022</year>
<volume>10</volume>
<numero>2</numero>
<issue>2</issue>
</nlm-citation>
</ref>
<ref id="B15">
<label>[15]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Muñoz]]></surname>
<given-names><![CDATA[E. G.]]></given-names>
</name>
<name>
<surname><![CDATA[Fabregat]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Bacca-Acosta]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Duque-Méndez]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Avila-Garzon]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Augmented Reality, Virtual Reality, and Game Technologies in Ophthalmology Training]]></article-title>
<source><![CDATA[Information]]></source>
<year>2022</year>
<volume>13</volume>
<numero>5</numero>
<issue>5</issue>
<page-range>222</page-range></nlm-citation>
</ref>
<ref id="B16">
<label>[16]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Gutiérrez-Lopera]]></surname>
<given-names><![CDATA[J. E.]]></given-names>
</name>
<name>
<surname><![CDATA[Toloza-Rangel]]></surname>
<given-names><![CDATA[J. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Soto-Vergel]]></surname>
<given-names><![CDATA[Á. J.]]></given-names>
</name>
<name>
<surname><![CDATA[López-Bustamante]]></surname>
<given-names><![CDATA[O. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Guevara-Ibarra]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[VEHÍCULOS TERRESTRES NO TRIPULADOS, SUS APLICACIONES Y TECNOLOGÍAS DE IMPLEMENTACIÓN]]></article-title>
<source><![CDATA[ingeniare]]></source>
<year>2021</year>
<numero>30</numero>
<issue>30</issue>
<page-range>47-71</page-range></nlm-citation>
</ref>
<ref id="B17">
<label>[17]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Eggers]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Risselada]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Niemand]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Robledo]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Referral campaigns for software startups: The impact of network characteristics on product adoption]]></article-title>
<source><![CDATA[J. Bus. Res]]></source>
<year>2022</year>
<volume>145</volume>
<page-range>309-24</page-range></nlm-citation>
</ref>
<ref id="B18">
<label>[18]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chidamber]]></surname>
<given-names><![CDATA[S. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Kemerer]]></surname>
<given-names><![CDATA[C. F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A metrics suite for object oriented design]]></article-title>
<source><![CDATA[IEEE Trans. Software Eng]]></source>
<year>1994</year>
<volume>20</volume>
<numero>6</numero>
<issue>6</issue>
<page-range>476-93</page-range></nlm-citation>
</ref>
<ref id="B19">
<label>[19]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chess]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[McGraw]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Static analysis for security]]></article-title>
<source><![CDATA[IEEE Security Privacy]]></source>
<year>2004</year>
<volume>2</volume>
<numero>6</numero>
<issue>6</issue>
<page-range>76-9</page-range></nlm-citation>
</ref>
<ref id="B20">
<label>[20]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Hovemeyer]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Pugh]]></surname>
<given-names><![CDATA[W.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Finding bugs is easy]]></article-title>
<source><![CDATA[SIGPLAN Not]]></source>
<year>2004</year>
<volume>39</volume>
<numero>12</numero>
<issue>12</issue>
<page-range>92-106</page-range></nlm-citation>
</ref>
<ref id="B21">
<label>[21]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Heckman]]></surname>
<given-names><![CDATA[S. S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Adaptively ranking alerts generated from automated static analysis]]></article-title>
<source><![CDATA[XRDS]]></source>
<year>2007</year>
<volume>14</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>1-11</page-range></nlm-citation>
</ref>
<ref id="B22">
<label>[22]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ruthruff]]></surname>
<given-names><![CDATA[J. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Penix]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Morgenthaler]]></surname>
<given-names><![CDATA[J. D.]]></given-names>
</name>
<name>
<surname><![CDATA[Elbaum]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Rothermel]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<source><![CDATA[Predicting accurate and actionable static analysis warnings: an experimental approach]]></source>
<year>2008</year>
<conf-name><![CDATA[ 30international conference on Software engineering]]></conf-name>
<conf-loc>Leipzig, Germany </conf-loc>
<page-range>341-50</page-range></nlm-citation>
</ref>
<ref id="B23">
<label>[23]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Bessey]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A few billion lines of code later: using static analysis to find bugs in the real world]]></article-title>
<source><![CDATA[Commun. ACM]]></source>
<year>2010</year>
<volume>53</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>66-75</page-range></nlm-citation>
</ref>
<ref id="B24">
<label>[24]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Johnson]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[Song]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
<name>
<surname><![CDATA[Murphy-Hill]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Bowdidge]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
</person-group>
<source><![CDATA[Why don&#8217;t software developers use static analysis tools to find bugs?]]></source>
<year>2013</year>
<conf-name><![CDATA[ 35International Conference on Software Engineering (ICSE)]]></conf-name>
<conf-date>2013</conf-date>
<conf-loc> </conf-loc>
<page-range>672-81</page-range></nlm-citation>
</ref>
<ref id="B25">
<label>[25]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Beller]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Bholanath]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[McIntosh]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Zaidman]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Source Software]]></source>
<year>2016</year>
<volume>1</volume>
<conf-name><![CDATA[ 23International Conference on Software Analysis, Evolution, and Reengineering (SANER)]]></conf-name>
<conf-date>2016</conf-date>
<conf-loc> </conf-loc>
<page-range>470-81</page-range></nlm-citation>
</ref>
<ref id="B26">
<label>[26]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Zampetti]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Scalabrino]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Oliveto]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Canfora]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Penta]]></surname>
<given-names><![CDATA[M. Di]]></given-names>
</name>
</person-group>
<source><![CDATA[How Open Source Projects Use Static Code Analysis Tools in Continuous Integration Pipelines]]></source>
<year>2017</year>
<conf-name><![CDATA[ IEEE/ACM 14th International Conference on Mining Software Repositories (MSR)]]></conf-name>
<conf-date>2017</conf-date>
<conf-loc> </conf-loc>
<page-range>334-44</page-range></nlm-citation>
</ref>
<ref id="B27">
<label>[27]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Hallem]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Chelf]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[Xie]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
<name>
<surname><![CDATA[Engler]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A system and language for building system-specific, static analyses]]></article-title>
<source><![CDATA[SIGPLAN Not]]></source>
<year>2002</year>
<volume>37</volume>
<numero>5</numero>
<issue>5</issue>
<page-range>69-82</page-range></nlm-citation>
</ref>
<ref id="B28">
<label>[28]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Zheng]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Williams]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Nagappan]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Snipes]]></surname>
<given-names><![CDATA[W.]]></given-names>
</name>
<name>
<surname><![CDATA[Hudepohl]]></surname>
<given-names><![CDATA[J. P.]]></given-names>
</name>
<name>
<surname><![CDATA[Vouk]]></surname>
<given-names><![CDATA[M. A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[On the value of static analysis for fault detection in software]]></article-title>
<source><![CDATA[IEEE Trans. Software Eng]]></source>
<year>2006</year>
<volume>32</volume>
<numero>4</numero>
<issue>4</issue>
<page-range>240-53</page-range></nlm-citation>
</ref>
<ref id="B29">
<label>[29]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ayewah]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Pugh]]></surname>
<given-names><![CDATA[W.]]></given-names>
</name>
<name>
<surname><![CDATA[Hovemeyer]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Morgenthaler]]></surname>
<given-names><![CDATA[J. D.]]></given-names>
</name>
<name>
<surname><![CDATA[Penix]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Using Static Analysis to Find Bugs]]></article-title>
<source><![CDATA[IEEE Softw]]></source>
<year>2008</year>
<volume>25</volume>
<numero>5</numero>
<issue>5</issue>
<page-range>22-9</page-range></nlm-citation>
</ref>
<ref id="B30">
<label>[30]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Kienle]]></surname>
<given-names><![CDATA[H. M.]]></given-names>
</name>
<name>
<surname><![CDATA[Kraft]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Nolte]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[System-specific static code analyses: a case study in the complex embedded systems domain]]></article-title>
<source><![CDATA[Software Quality Journal]]></source>
<year>2012</year>
<volume>20</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>337-67</page-range></nlm-citation>
</ref>
<ref id="B31">
<label>[31]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Baca]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Carlsson]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[Petersen]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Lundberg]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Improving software security with static automated code analysis in an industry setting]]></article-title>
<source><![CDATA[Softw. Pract. Exp]]></source>
<year>2013</year>
<volume>43</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>259-79</page-range></nlm-citation>
</ref>
<ref id="B32">
<label>[32]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Sadowski]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Aftandilian]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Eagle]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Miller-Cushon]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Jaspan]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Lessons from building static analysis tools at Google,]]></article-title>
<source><![CDATA[Commun. ACM]]></source>
<year>2018</year>
<volume>61</volume>
<numero>4</numero>
<issue>4</issue>
<page-range>58-66</page-range></nlm-citation>
</ref>
<ref id="B33">
<label>[33]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Vassallo]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Panichella]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Proksch]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Gall]]></surname>
<given-names><![CDATA[H. C.]]></given-names>
</name>
<name>
<surname><![CDATA[Zaidman]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[How developers engage with static analysis tools in different contexts]]></article-title>
<source><![CDATA[Empirical Software Engineering]]></source>
<year>2020</year>
<volume>25</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>1419-57</page-range></nlm-citation>
</ref>
<ref id="B34">
<label>[34]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Gu]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Towards Efficient Large-Scale Interprocedural Program Static Analysis on Distributed Data-Parallel Computation]]></article-title>
<source><![CDATA[IEEE Trans. Parallel Distrib. Syst]]></source>
<year>2021</year>
<volume>32</volume>
<numero>4</numero>
<issue>4</issue>
<page-range>867-83</page-range></nlm-citation>
</ref>
<ref id="B35">
<label>[35]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pecorelli]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Nucci]]></surname>
<given-names><![CDATA[D. Di]]></given-names>
</name>
<name>
<surname><![CDATA[Roover]]></surname>
<given-names><![CDATA[C. De]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A large empirical assessment of the role of data balancing in machine-learning-based code smell detection]]></article-title>
<source><![CDATA[J. Syst. Softw]]></source>
<year>2020</year>
<volume>169</volume>
<page-range>110693</page-range></nlm-citation>
</ref>
<ref id="B36">
<label>[36]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pecorelli]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Lujan]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Lenarduzzi]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[On the adequacy of static analysis warnings with respect to code smell prediction]]></article-title>
<source><![CDATA[Empir. Softw. Eng]]></source>
<year>2022</year>
<volume>27</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>64</page-range></nlm-citation>
</ref>
<ref id="B37">
<label>[37]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pecorelli]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Nucci]]></surname>
<given-names><![CDATA[D. Di]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
</person-group>
<source><![CDATA[Comparing Heuristic and Machine Learning Approaches for Metric-Based Code Smell Detection]]></source>
<year>2019</year>
<conf-name><![CDATA[ IEEE/ACM 27th International Conference on Program Comprehension (ICPC)]]></conf-name>
<conf-date>2019</conf-date>
<conf-loc> </conf-loc>
<page-range>93-104</page-range></nlm-citation>
</ref>
<ref id="B38">
<label>[38]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Nucci]]></surname>
<given-names><![CDATA[D. Di]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Tamburri]]></surname>
<given-names><![CDATA[D. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Serebrenik]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
</person-group>
<source><![CDATA[Detecting code smells using machine learning techniques: Are we there yet?]]></source>
<year>2018</year>
<conf-name><![CDATA[ 25International Conference on Software Analysis, Evolution and Reengineering (SANER)]]></conf-name>
<conf-date>2018</conf-date>
<conf-loc> </conf-loc>
<page-range>612-21</page-range></nlm-citation>
</ref>
<ref id="B39">
<label>[39]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Fontana]]></surname>
<given-names><![CDATA[F. Arcelli]]></given-names>
</name>
<name>
<surname><![CDATA[Mäntylä]]></surname>
<given-names><![CDATA[M. V.]]></given-names>
</name>
<name>
<surname><![CDATA[Zanoni]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Marino]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Comparing and experimenting machine learning techniques for code smell detection]]></article-title>
<source><![CDATA[Empirical Software Engineering]]></source>
<year>2016</year>
<volume>21</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>1143-91</page-range></nlm-citation>
</ref>
<ref id="B40">
<label>[40]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Lujan]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Pecorelli]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
<name>
<surname><![CDATA[Lenarduzzi]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
</person-group>
<source><![CDATA[A preliminary study on the adequacy of static analysis warnings with respect to code smell prediction]]></source>
<year>2020</year>
<conf-name><![CDATA[ 28Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B41">
<label>[41]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Catolino]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Fontana]]></surname>
<given-names><![CDATA[F. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
<name>
<surname><![CDATA[Zaidman]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Ferrucci]]></surname>
<given-names><![CDATA[.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Improving change prediction models with code smell-related information]]></article-title>
<source><![CDATA[Empirical Software Engineering]]></source>
<year>2020</year>
<volume>25</volume>
<numero>1</numero>
<issue>1</issue>
<page-range>49-95</page-range></nlm-citation>
</ref>
<ref id="B42">
<label>[42]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pecorelli]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Palomba]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Khomh]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Lucia]]></surname>
<given-names><![CDATA[A. De]]></given-names>
</name>
</person-group>
<source><![CDATA[Developer-driven code smell prioritization]]></source>
<year>2020</year>
<conf-name><![CDATA[ 17International Conference on Mining Software Repositories]]></conf-name>
<conf-loc>Seoul Republic of Korea </conf-loc>
</nlm-citation>
</ref>
<ref id="B43">
<label>[43]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Shcherban]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Liang]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
<name>
<surname><![CDATA[Tahir]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Li]]></surname>
<given-names><![CDATA[X.]]></given-names>
</name>
</person-group>
<source><![CDATA[Automatic Identification of Code Smell Discussions on Stack Overflow: A Preliminary Investigation]]></source>
<year>2020</year>
<conf-name><![CDATA[ 14ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)]]></conf-name>
<conf-loc>Bari, Italy </conf-loc>
<page-range>1-6</page-range></nlm-citation>
</ref>
<ref id="B44">
<label>[44]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Das]]></surname>
<given-names><![CDATA[A. K.]]></given-names>
</name>
<name>
<surname><![CDATA[Yadav]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Dhal]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Detecting Code Smells using Deep Learning]]></source>
<year>2019</year>
<conf-name><![CDATA[ TENCON 2019 - 2019 IEEE Region 10 Conference (TENCON)]]></conf-name>
<conf-loc> </conf-loc>
<page-range>2081-6</page-range></nlm-citation>
</ref>
<ref id="B45">
<label>[45]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Dang]]></surname>
<given-names><![CDATA[B. H.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[A Practical Approach for Ranking Software Warnings from Multiple Static Code Analysis Reports]]></article-title>
<source><![CDATA[2020 SoutheastCon]]></source>
<year>2020</year>
<volume>2</volume>
<page-range>1-7</page-range></nlm-citation>
</ref>
<ref id="B46">
<label>[46]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Wang]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Zhang]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Liu]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Lin]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Wu]]></surname>
<given-names><![CDATA[W.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Predicting bugs&#8217; components via mining bug reports]]></article-title>
<source><![CDATA[J. Softw. Maint. Evol.: Res. Pract]]></source>
<year>2012</year>
<volume>7</volume>
<numero>5</numero>
<issue>5</issue>
</nlm-citation>
</ref>
<ref id="B47">
<label>[47]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Boland]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Black]]></surname>
<given-names><![CDATA[P. E.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Juliet 1.1 C/C++ and Java Test Suite]]></article-title>
<source><![CDATA[Computer]]></source>
<year>2012</year>
<volume>45</volume>
<numero>10</numero>
<issue>10</issue>
<page-range>88-90</page-range></nlm-citation>
</ref>
<ref id="B48">
<label>[48]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Allier]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Anquetil]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Hora]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Ducasse]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[A Framework to Compare Alert Ranking Algorithms]]></source>
<year>2012</year>
<conf-name><![CDATA[ 19Working Conference on Reverse Engineering]]></conf-name>
<conf-date>2012</conf-date>
<conf-loc> </conf-loc>
<page-range>277-85</page-range></nlm-citation>
</ref>
<ref id="B49">
<label>[49]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Sharma]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Bedi]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
<name>
<surname><![CDATA[Chaturvedi]]></surname>
<given-names><![CDATA[K. K.]]></given-names>
</name>
<name>
<surname><![CDATA[Singh]]></surname>
<given-names><![CDATA[V. B.]]></given-names>
</name>
</person-group>
<source><![CDATA[Predicting the priority of a reported bug using machine learning techniques and cross project validation]]></source>
<year>2012</year>
<conf-name><![CDATA[ 12International Conference on Intelligent Systems Design and Applications (ISDA)]]></conf-name>
<conf-date>2012</conf-date>
<conf-loc> </conf-loc>
<page-range>539-45</page-range></nlm-citation>
</ref>
<ref id="B50">
<label>[50]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Shen]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Fang]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Zhao]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[EFindBugs: Effective Error Ranking for FindBugs]]></source>
<year>2011</year>
<conf-name><![CDATA[ FourthIEEE International Conference on Software Testing, Verification and Validation]]></conf-name>
<conf-date>2011</conf-date>
<conf-loc> </conf-loc>
<page-range>299-308</page-range></nlm-citation>
</ref>
<ref id="B51">
<label>[51]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Liang]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
<name>
<surname><![CDATA[Wu]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Wu]]></surname>
<given-names><![CDATA[Q.]]></given-names>
</name>
<name>
<surname><![CDATA[Wang]]></surname>
<given-names><![CDATA[Q.]]></given-names>
</name>
<name>
<surname><![CDATA[Xie]]></surname>
<given-names><![CDATA[T.]]></given-names>
</name>
<name>
<surname><![CDATA[Mei]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
</person-group>
<source><![CDATA[Automatic construction of an effective training set for prioritizing static analysis warnings]]></source>
<year>2010</year>
<conf-name><![CDATA[ Proceedings of the IEEE/ACM international conference on Automated software engineering]]></conf-name>
<conf-loc>Antwerp, Belgium </conf-loc>
<page-range>93-102</page-range></nlm-citation>
</ref>
<ref id="B52">
<label>[52]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Nanda]]></surname>
<given-names><![CDATA[M. G.]]></given-names>
</name>
<name>
<surname><![CDATA[Gupta]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Sinha]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Chandra]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Schmidt]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Balachandran]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
</person-group>
<source><![CDATA[Making defect-finding tools work for you]]></source>
<year>2010</year>
<conf-name><![CDATA[ Proceedings of the 32nd ACM/IEEE International Conference on Software Engineering - Volume 2, Cape Town, South Africa]]></conf-name>
<conf-loc> </conf-loc>
<page-range>99-108</page-range></nlm-citation>
</ref>
<ref id="B53">
<label>[53]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Heckman]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Williams]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
</person-group>
<source><![CDATA[A Model Building Process for Identifying Actionable Static Analysis Alerts]]></source>
<year>2009</year>
<conf-name><![CDATA[ International Conference on Software Testing Verification and Validation]]></conf-name>
<conf-date>2009</conf-date>
<conf-loc> </conf-loc>
<page-range>161-70</page-range></nlm-citation>
</ref>
<ref id="B54">
<label>[54]</label><nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chen]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[IntFinder: Automatically detecting integer bugs in x86 binary program]]></article-title>
<source><![CDATA[Information and Communications Security]]></source>
<year>2009</year>
<page-range>336-45</page-range><publisher-loc><![CDATA[Berlin, Heidelberg ]]></publisher-loc>
<publisher-name><![CDATA[Springer Berlin Heidelberg]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B55">
<label>[55]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Mendonça]]></surname>
<given-names><![CDATA[D. S.]]></given-names>
</name>
<name>
<surname><![CDATA[Kalinowski]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[An empirical investigation on the challenges of creating custom static analysis rules for defect localization]]></article-title>
<source><![CDATA[Software Quality Journal]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B56">
<label>[56]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Serban]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Golsteijn]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[Holdorp]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Serebrenik]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[SAW-BOT: Proposing Fixes for Static Analysis Warnings with GitHub Suggestions]]></source>
<year>2021</year>
<conf-name><![CDATA[ IEEE/ACM Third International Workshop on Bots in Software Engineering (BotSE)]]></conf-name>
<conf-date>2021</conf-date>
<conf-loc> </conf-loc>
<page-range>26-30</page-range></nlm-citation>
</ref>
<ref id="B57">
<label>[57]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Marcilio]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Furia]]></surname>
<given-names><![CDATA[C. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Bonifácio]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Pinto]]></surname>
<given-names><![CDATA[G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[SpongeBugs: Automatically generating fix suggestions in response to static code analysis warnings]]></article-title>
<source><![CDATA[J. Syst. Softw]]></source>
<year>2020</year>
<volume>168</volume>
<page-range>110671</page-range></nlm-citation>
</ref>
<ref id="B58">
<label>[58]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Lenarduzzi]]></surname>
<given-names><![CDATA[V.]]></given-names>
</name>
<name>
<surname><![CDATA[Lomio]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Huttunen]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Taibi]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
</person-group>
<source><![CDATA[Are SonarQube Rules Inducing Bugs?]]></source>
<year>2020</year>
<conf-name><![CDATA[ 27International Conference on Software Analysis, Evolution and Reengineering (SANER)]]></conf-name>
<conf-date>2020</conf-date>
<conf-loc> </conf-loc>
<page-range>501-11</page-range></nlm-citation>
</ref>
<ref id="B59">
<label>[59]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Liu]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
<name>
<surname><![CDATA[Koyuncu]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Kim]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Bissyandè]]></surname>
<given-names><![CDATA[T. F.]]></given-names>
</name>
</person-group>
<source><![CDATA[AVATAR: Fixing Semantic Bugs with Fix Patterns of Static Analysis Violations]]></source>
<year>2019</year>
<conf-name><![CDATA[ 26International Conference on Software Analysis, Evolution and Reengineering (SANER)]]></conf-name>
<conf-date>2019</conf-date>
<conf-loc> </conf-loc>
<page-range>1-12</page-range></nlm-citation>
</ref>
<ref id="B60">
<label>[60]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Bavishi]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Yoshida]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Prasad]]></surname>
<given-names><![CDATA[M. R.]]></given-names>
</name>
</person-group>
<source><![CDATA[Phoenix: automated data-driven synthesis of repairs for static analysis violations]]></source>
<year>2019</year>
<conf-name><![CDATA[ Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering]]></conf-name>
<conf-loc>Tallinn, Estonia </conf-loc>
<page-range>613-24</page-range></nlm-citation>
</ref>
<ref id="B61">
<label>[61]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Wyrich]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Bogner]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Towards an Autonomous Bot for Automatic Source Code Refactoring]]></source>
<year>2019</year>
<conf-name><![CDATA[ IEEE/ACM 1st International Workshop on Bots in Software Engineering (BotSE)]]></conf-name>
<conf-date>2019</conf-date>
<conf-loc> </conf-loc>
<page-range>24-8</page-range></nlm-citation>
</ref>
<ref id="B62">
<label>[62]</label><nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Aloraini]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
<name>
<surname><![CDATA[Nagappan]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[German]]></surname>
<given-names><![CDATA[D. M.]]></given-names>
</name>
<name>
<surname><![CDATA[Hayashi]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Higo]]></surname>
<given-names><![CDATA[Y.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[An empirical study of security warnings from static application security testing tools]]></article-title>
<source><![CDATA[J. Syst. Softw]]></source>
<year>2019</year>
<volume>158</volume>
<page-range>110427</page-range></nlm-citation>
</ref>
<ref id="B63">
<label>[63]</label><nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Alikhashashneh]]></surname>
<given-names><![CDATA[E. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Raje]]></surname>
<given-names><![CDATA[R. R.]]></given-names>
</name>
<name>
<surname><![CDATA[Hill]]></surname>
<given-names><![CDATA[J. H.]]></given-names>
</name>
</person-group>
<source><![CDATA[Using Machine Learning Techniques to Classify and Predict Static Code Analysis Tool Warnings]]></source>
<year>2018</year>
<conf-name><![CDATA[ IEEE/ACS 15th International Conference on Computer Systems and Applications (AICCSA)]]></conf-name>
<conf-date>2018</conf-date>
<conf-loc> </conf-loc>
<page-range>1-8</page-range></nlm-citation>
</ref>
</ref-list>
</back>
</article>
