Static analysis (SA) tools analyze source code for security defects and alert users to issues requiring repair. While invaluable, SA tools tend to produce many alerts (many of which are false ...

Our goal is to enable analysts throughout the DoD to detect malicious code before it can compromise DoD systems.