Static Code Analysis

Ask about this topic

Overview

Static code analysis examines program structure and behavior without executing the program, helping developers find bugs and security flaws early and check code at scale. Common approaches include abstract syntax trees, control-flow and data-flow analysis, taint tracking, type and contract checking, code property graphs, and symbolic execution; they are used for tasks such as vulnerability detection, code-smell detection, and compiler feedback. Recent work also uses large language models to guide analysis or interpret findings, often grounding their output in deterministic analyzers and program graphs. A central challenge is balancing false alarms against missed defects: static tools may lack runtime or configuration context, so combining them with testing or exploit validation remains important.

Latest papers

CardsList

56 papers3 papers in the last four weeks, level with the four weeks before. 0.0% of all new papers.

  1. How Deterministic SAST and AI Security Agents Divide the Work: Coverage, Harness Policy and Cost in Snyk VulnBench 2.0

    Oct 28, 2026Liran Tal, Chris Liu, Charlotte Fereday +2Software Vulnerability DetectionAI Agent Security Benchmarks

    Snyk

  2. Silent and Costly: Characterizing and Detecting Prompt-Caching Mis-Integration in LLM Agents

    Oct 26, 2026Ying Zhang, Ruoqi Guo, Yi Liu +4LLM Agent ReliabilityLLM Agent Efficiency

    Wake Forest University Winston-Salem, USA · Griffith University Gold Coast, Australia · Nanyang Technological University Singapore +2

  3. Self-Evolving Static Analysis via LLM Pseudo-Labeling

    Oct 20, 2026Rui Melo, Andre Duarte, Aditya Oke +5Static Code AnalysisSoftware Vulnerability Detection

    Carnegie Mellon University · FEUP

  4. LintEval: Benchmarking LLMs on Linter-Guided File Refactoring

    Oct 14, 2026Tongwei Deng, Jinyu Zhu, Yue Cao +3Automated Code RefactoringCode Language Models

    School of Computer Science, Peking University · Key Lab of HCST (PKU), MOE; SCS, Peking University · School of Software Engineering, Beijing Jiaotong University

  5. CheckerBench: Can Long-Horizon Agents Synthesize Static-Analysis Checkers?

    Oct 6, 2026Hang He, Li Wang, Hao Chen +9Software Engineering AgentsStatic Code Analysis

    East China Normal University, Humanlaya Data, Shanghai Jiao Tong University, Peking University, Shanghai Innovation Institute

  6. Type-IV Code Clone Detection via Layer-Wise Non-Contrastive Representation Learning

    Sep 15, 2026Luciano Marchezan, Kevin Delcourt, Eugene Syriani +1Representation LearningStatic Code Analysis

    Universit´e de Montr´eal. Montreal, QC, Canada

  7. TyPatch: Transforming Patches into Typestate Rules for Kernel Bug Detection

    Sep 12, 2026Ruoyu Wang, Tuo Li, Jia LiFault DetectionStatic Code Analysis

    College of AI Tsinghua University Beijing, China · The University of Hong Kong Hong Kong, China · Tsinghua University Beijing, China

  8. Beyond Static Guarantees: Measuring the Static-Pass Dynamic-Fail Gap in Security-Sensitive and LLM-Generated Python Code

    Sep 9, 2026Jessica Pourleyli, Maitreyee Das Urmi, Glaucia MeloSoftware Vulnerability DetectionSoftware Security

    Toronto Metropolitan University Toronto, Canada

  9. Beyond F1: Evaluating Coverage and Failure Recovery in AI Model Security Scanners

    Aug 27, 2026Qianlong Lan, Vinothini Pandurangan, Anuj Kaul +1Static Code Analysis

    eBay Inc.

  10. ARQ: Agentic CodeQL Query Refinement for C/C++ Vulnerability Detection

    Aug 21, 2026Chunyi Wang, Yunfei Ke, Junfeng Yang +2Software Vulnerability DetectionStatic Code Analysis

    Department of Computer Science, Columbia University, New York, United States

  11. Securing AI-Generated Code: A Just-in-Time Vulnerability Detection and Remediation Pipeline

    Aug 17, 2026Mikhail SurikovSecure Code GenerationSoftware Vulnerability Detection

    Georgia Institute of Technology Atlanta, Georgia, USA

  12. RAGas: Retrieval-Augmented Gas Optimization for Smart Contracts with Continuous Knowledge Integration

    Aug 16, 2026Yishun Wang, Wenjin Yi, Wenkai Li +2Automated Program RepairStatic Code Analysis

    School of Cyberspace Security, Hainan University

  13. Comprendia: AI-Augmented Code Comprehension

    Aug 10, 2026Costain Nachuma, Minhaz F. ZibranStatic Code AnalysisAI-Assisted Software Development

    Department of Computer Science Idaho State University Pocatello, Idaho, USA

  14. SkillsMetric: Mapping the Detection Boundary of Static Analysis for Malicious Agent Skills

    Aug 9, 2026Xinze Chen, Chi Zhang, Ping Ji +1Static Code AnalysisAI Agent Security Benchmarks

    The Graduate Center, City University of New York · New York, NY, USA · Hunter College, City University of New York +2

  15. A Unified Model for Cross-Domain Clone Detection via Model Merging

    Aug 4, 2026Palash R. Roy, Banani Roy, Kevin A. Schneider +1Static Code AnalysisCross-Domain Generalization

    University of Saskatchewan Computer Science Saskatoon, Canada

  16. Agentic Planning for Symbolic Execution

    Jul 31, 2026Daniel Koh Ji Yang, Yannic Noller, Corina S. Pasareanu +1Symbolic ReasoningStatic Code Analysis

    Mohamed bin Zayed University of Artificial Intelligence, Abu Dhabi, United Arab Emirates · Ruhr-Universität Bochum, Bochum, Germany · Carnegie Mellon University, Pittsburgh, PA, USA

  17. Relaxed activation analysis of dataflow networks - A clock calculus for machine learning and real-time scheduling

    Jul 23, 2026William Gaudelier, Albert Cohen, Dumitru Potop ButucaruReal-Time SchedulingStatic Code Analysis

    Inria, Paris, France · Google DeepMind, Paris, France

  18. Generative Compilation: On-the-Fly Compiler Feedback as AI Generates Code

    Jul 15, 2026Niels Mündler-Sasahara, Hristo Venev, Dawn Song +2Code GenerationStatic Code Analysis

    ETH Zurich, Switzerland · INSAIT and Sofia University “St. Kliment Ohridski”, Bulgaria · University of California, Berkeley, USA

  19. AutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration

    Jul 13, 2026Arastoo Zibaeirad, Marco Vieira, Thomas ZimmermannSoftware Vulnerability DetectionStatic Code Analysis

    University of North Carolina at Charlotte · Charlotte, NC, USA · University of California, Irvine +1

  20. Mitigating LLM Sycophancy in Code Smell Detection Using Evidence-Guided Reasoning Prompts

    Jul 11, 2026Istiaq Ahmed Fahad, Kamruzzaman Asif, Md. Nurul Ahad TawhidLLM SycophancyStatic Code Analysis

    Institute of Information Technology · University of Dhaka · Dhaka, Bangladesh

  21. The Patchwork Problem in LLM-Generated Code

    Jul 9, 2026Viraaji Mothukuri, Reza M. PariziStatic Code AnalysisLLM Reliability

    Decentralized Science Lab, College of Computing and Software Engineering Kennesaw State University, GA, USA

  22. Static Metrics Are Insufficient: Predicting Java Method Energy Usage with Execution Time

    Jul 7, 2026Muhammad Imran, Vincenzo Stoico, Ivano MalavoltaSoftware EngineeringStatic Code Analysis

    University of L’Aquila, L’Aquila, Italy · Vrije Universiteit Amsterdam, Amsterdam, The Netherlands

  23. Rethinking Complexity Metrics for LLM-Integrated Applications: Beyond Source Code

    Jul 2, 2026Zihao Xu, Yuekang Li, Gelei Deng +2Software EngineeringStatic Code Analysis

    University of New South Wales, Australia · Nanyang Technological University, Singapore · Griffith University, Australia +2

  24. Benchmarking Large Language Models on Floating-Point Error Classification

    Jun 30, 2026Lisa Taldir, Muhammad Ahmad Saeed, David Defour +2LLM EvaluationStatic Code Analysis

    LI-PaRAD · Université de Perpignan via Domitia, Perpignan, France · Université Paris-Saclay, UVSQ, France +1

  25. Reinforcement Learning for Software Vulnerability Analysis: A Systematic Review with Emphasis on C/C++ Source Code and Static Analysis

    Jun 24, 2026Bruno Caro-Vásquez, Carola Figueroa-Flores, Gastón MarquezReinforcement LearningSoftware Vulnerability Detection

    Master’s Student in Computer Science, Universidad del Bío-Bío, Chile · Department of Computer Science and Information Technology, Universidad del Bío-Bío, Chile

  26. Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer

    Jun 19, 2026Zhengsong Zhang, Zongze Li, Jiawei Guo +1AI Agent AuditingSoftware Vulnerability Detection

    Department of Computer Science and Engineering University at Buffalo, SUNY

  27. OpenAnt: LLM-Powered Vulnerability Discovery Through Code Decomposition, Adversarial Verification, and Dynamic Testing

    Jun 17, 2026Nahum Korda, Gadi EvronSoftware Vulnerability DetectionStatic Code Analysis

    Knostic

  28. Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?

    Jun 14, 2026Liran Tal, Johannes Kloos, Arsenii Rudich +2Software Vulnerability DetectionStatic Code Analysis

    Snyk

  29. Data-aware Static Analysis: Improving Detection of Semantic Faults in Machine Learning Code Using Data Characteristics

    Jun 8, 2026Willem Meijer, Kristian Sandahl, Dániel VarróFault DetectionStatic Code Analysis

    Linköping University, Linköping, Sweden

  30. MOLOT System Card: Malicious Operational Logic Observation Transformer

    Jun 5, 2026Daniil Lopatkin, Maksim Mitrofanov, Stanislav Rakovsky +1Static Code AnalysisMalware Classification

    Data Science & ML Dept. Positive Technologies False Positive Community