A survey of static analysis methods for identifying security vulnerabilities in software systems.

Marco Pistoia Satish Chandra Stephen J. Fink Eran Yahav A survey of static analysis methods for identifying security vulnerabilities in software systems. 265-288 2007 46 IBM Systems Journal 2 http://dx.doi.org/10.1147/sj.462.0265 db/journals/ibmsj/ibmsj46.html#PistoiaCFY07