Skip to main content
Article
To what extent could we detect field defects? An extended empirical study of false negatives in static bug finding tools
Automated Software Engineering
  • Ferdian THUNG, Singapore Management University
  • Lucia Lucia, Singapore Management University
  • David LO, Singapore Management University
  • Lingxiao JIANG, Singapore Management University
  • Foyzur RAHMAN, University of California, Davis
  • Premkumar DEVANBU, University of California, Davis
Publication Type
Journal Article
Version
publishedVersion
Publication Date
9-2014
Abstract

Software defects can cause much loss. Static bug-finding tools are designed to detect and remove software defects and believed to be effective. However, do such tools in fact help prevent actual defects that occur in the field and reported by users? If these tools had been used, would they have detected these field defects, and generated warnings that would direct programmers to fix them? To answer these questions, we perform an empirical study that investigates the effectiveness of five state-of-the-art static bug-finding tools (FindBugs, JLint, PMD, CheckStyle, and JCSC) on hundreds of reported and fixed defects extracted from three open source programs (Lucene, Rhino, and AspectJ). Our study addresses the question: To what extent could field defects be detected by state-of-the-art static bug-finding tools? Different from past studies that are concerned with the numbers of false positives produced by such tools, we address an orthogonal issue on the numbers of false negatives. We find that although many field defects could be detected by static bug-finding tools, a substantial proportion of defects could not be flagged. We also analyze the types of tool warnings that are more effective in finding field defects and characterize the types of missed defects. Furthermore, we analyze the effectiveness of the tools in finding field defects of various severities, difficulties, and types.

Keywords
  • False negatives,
  • Static bug-finding tools,
  • Empirical study
Identifier
10.1007/s10515-014-0169-8
Publisher
Springer Verlag
Creative Commons License
Creative Commons Attribution-NonCommercial-No Derivative Works 4.0 International
Additional URL
http://doi.org/10.1007/s10515-014-0169-8
Citation Information
Ferdian THUNG, Lucia Lucia, David LO, Lingxiao JIANG, et al.. "To what extent could we detect field defects? An extended empirical study of false negatives in static bug finding tools" Automated Software Engineering Vol. 22 Iss. 4 (2014) p. 561 - 602 ISSN: 0928-8910
Available at: http://works.bepress.com/david_lo/336/