preprint · arXiv (Cornell University) · 2023

Vulnerable Source Code Detection using SonarCloud Code Analysis

Alifia Puspaningrum, Muhammad Anis Al Hilmi, Darsih, M. Zainal Mustamiin, Maulana Ilham Ginanjar

Cited by 0Open access

Abstract

In Software Development Life Cycle (SDLC), security vulnerabilities are one of the points introduced during the construction stage. Failure to detect software defects earlier after releasing the product to the market causes higher repair costs for the company. So, it decreases the company's reputation, violates user privacy, and causes an unrepairable issue for the application. The introduction of vulnerability detection enables reducing the number of false alerts to focus the limited testing efforts on potentially vulnerable files. UMKM Masa Kini (UMI) is a Point of Sales application to sell any Micro, Small, and Medium Enterprises Product (UMKM). Therefore, in the current work, we analyze the suitability of these metrics to create Machine Learning based software vulnerability detectors for UMI applications. Code is generated using a commercial tool, SonarCloud. Experimental result shows that there are 3,285 vulnerable rules detected.

Cite this paper

APA 7

Puspaningrum, A., Al Hilmi, M. A., Darsih, Mustamiin, M. Z., & Ginanjar, M. I. (2023). Vulnerable Source Code Detection using SonarCloud Code Analysis. arXiv (Cornell University). https://doi.org/10.48550/arxiv.2307.02446

MLA 9

Puspaningrum, Alifia, et al. “Vulnerable Source Code Detection using SonarCloud Code Analysis.” arXiv (Cornell University), 2023, https://doi.org/10.48550/arxiv.2307.02446.

Chicago

Puspaningrum, Alifia, Muhammad Anis Al Hilmi, Darsih, M. Zainal Mustamiin, and Maulana Ilham Ginanjar. 2023. “Vulnerable Source Code Detection using SonarCloud Code Analysis.” arXiv (Cornell University). https://doi.org/10.48550/arxiv.2307.02446.

Harvard

Puspaningrum, A. et al. (2023) ‘Vulnerable Source Code Detection using SonarCloud Code Analysis’, arXiv (Cornell University). Available at: https://doi.org/10.48550/arxiv.2307.02446.

BibTeX

@misc{puspaningrum2023vulnerable,
  title = {{Vulnerable Source Code Detection using SonarCloud Code Analysis}},
  author = {Puspaningrum, Alifia and Al Hilmi, Muhammad Anis and Darsih and Mustamiin, M. Zainal and Ginanjar, Maulana Ilham},
  journal = {arXiv (Cornell University)},
  year = {2023},
  doi = {10.48550/arxiv.2307.02446}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.