Vulnerability Detection Systems: Think Cyborg, Not Robot
Sean Heelan · IEEE Security & Privacy · 2011
This paper discussed why academic research has failed to create effective vulnerability detection software and offer some suggestions on how we can reap practical benefits from future research. The reasons for this failure also help explain why this software can't be completely automatic but must in corporate human knowledge and capabilities to be effective.