Building a Framework to Improve the User Experience of Static Analysis Tools

Building a Framework to Improve the User Experience of Static Analysis Tools

연구 분야: Verification

학회: ICSE-Companion '24: Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings

Static analysis tools are an important technique that helps in the development of secure code by analyzing code and reporting potential errors to developers. Besides the technical challenges of developing sophisticated static analyses, research, however, has also shown that static analysis tools often do not address the tools' usability sufficiently. Such usability issues existing in static analysis tools can inhibit the acceptance in practice by developers or might even lead to the tool's dismissal. To address this, we aim to help improve the user experience for developers using static analysis tools. We investigated several fundamentals to develop and properly evaluate usability interventions. Those fundamentals namely are the Foundations on the origin of API misuse (F1), the State of the art of static analysis tool usability (F2), and the Evaluation of static analysis tool accuracy (F3). Combining these fundamentals, we propose a theoretical framework to develop usability interventions for static analysis tools and then evaluate them. In this paper we discuss our research contribution to each fundamental respectively and how we believe the resulting framework can be employed to improve the user experience of static analysis tools.