Amazon Technologies, Inc.

Norbert Manthey

Martin Thomas Pohlack

Michael Tautschnig

Bjoern Doebel

Targeted dynamic analysis of code is provided by utilizing static analysis and dynamic analysis. A static code analysis system can operate to generate an initial analysis of code. The results of the initial analysis may be used to target a dynamic analysis system to analyze portions of code identified by the static analysis as potentially containing defects. In some cases, a preliminary dynamic analysis may be used to generate code inputs that may be utilized in future analyses to determine the inputs necessary to target particular code paths identified by a static analysis as potentially defective. Future updates to the code base may utilize the generated data to target analysis to code paths affected by the updates.

Guided dynamic analysis of code with static code analysis

Techniques for static code analysis tool and configuration recommendation via codebase analysis are described. Multiple codebases are tested using multiple static analysis tools and corresponding configurations, and a machine learning model is trained based on the results and characteristics of the codebases. Users may provide a codebase to be analyzed and job preferences indicating what characteristics of static analysis they desire, the codebase may be analyzed to generate input data for the model, and the model may identify one or more similar testing runs. These candidate runs may be filtered and/or ordered based on the user's stated job preferences, and the resulting tools and configurations associated with these runs may be returned to the user or used to perform static analysis of the user's codebase.

Growing community of inventors

Dresden, Germany

Norbert Manthey