biblio.bib

@Online{nist2016official,
    author          =   {National Institute of Standards and Technology},
    url             =   {http://www.nist.gov}
}

@Online{nist2016beta,
    author          =   {National Institute of Standards and Technology},
    url             =   {https://www2.nist.gov}
}

@Online{samate2016official,
    author          =   {Software Assurance Metrics And Tool Evaluation Team},
    url             =   {http://www.samate.nist.gov}
}

@Online{nist2016general,
    author          =   {National Institute of Standards and Technology},
    title           =   {NIST General Information},
    year            =   {2016},
    month           =   {jan},
    url             =   {http://www.nist.gov/public_affairs/general_information.cfm}
}

@Online{nist2016mission,
    author          =   {National Institute of Standards and Technology},
    title           =   {NIST Mission, Vision and Values},
    year            =   {2016},
    month           =   {aug},
    url             =   {https://www.nist.gov/about-nist/our-organization/mission-vision-values}
}
    
@Online{nist2016orgchart,
    author          =   {National Institute of Standards and Technology},
    title           =   {NIST Organizational Structure},
    year            =   {2016},
    month           =   {may},
    url             =   {http://www.nist.gov/director/orgchart.cfm}
}

@Online{nist2016organization,
    author          =   {National Institute of Standards and Technology},
    title           =   {NIST Organization},
    year            =   {2016},
    month           =   {may},
    url             =   {https://www2.nist.gov/about-nist/our-organization}
}

@Online{nist2016itlpresentation,
    author          =   {National Institute of Standards and Technology},
    title           =   {ITL Presentation},
    year            =   {2016},
    month           =   {jun},
    url             =   {http://www.nist.gov/itl/what-itl-does.cfm}
}

@Online{nist2016itlorgchart,
    author          =   {National Institute of Standards and Technology},
    title           =   {ITL Organizational Structure},
    year            =   {2015},
    month           =   {dec},
    url             =   {http://www.nist.gov/itl/upload/OrgChart.pdf}
}

@Online{nist2016ssdpresentation,
    author          =   {National Institute of Standards and Technology},
    title           =   {SSD Presentation},
    year            =   {2016},
    month           =   {jul},
    url             =   {http://www.nist.gov/itl/ssd/index.cfm}
}

@Online{nist2016ssdprojects,
    author          =   {National Institute of Standards and Technology},
    title           =   {Software Quality Group Presentation},
    year            =   {2012},
    month           =   {may},
    url             =   {http://www.nist.gov/itl/ssd/cs/index.cfm}
}

@Online{nist2016samatepresentation,
    author          =   {National Institute of Standards and Technology},
    title           =   {SAMATE Presentation},
    year            =   {2016},
    month           =   {mar},
    url             =   {http://www.nist.gov/itl/ssd/cs/samate.cfm}
}

@Online{nist2016locations,
    author          =   {National Institute of Standards and Technology},
    title           =   {NIST Locations},
    year            =   {2013},
    month           =   {may},
    url             =   {http://www.nist.gov/locations.cfm}
}

@Book{chess2007secure,
    author      =   {Brian Chess AND Jacob West},
    title       =   {Secure Programming with Static Analysis},
    year        =   {2007},
    isbn        =   {0-321-42477-8},
    publisher   =   {Addison-Wesley Professional}
}

@Online{nist2016sard,
    author          =   {National Institute of Standards and Technology},
    title           =   {Software Assurance Reference Dataset Project},
    year            =   {2016},
    url             =   {https://samate.nist.gov/SARD/}
}

@article{dolan2016lava,
  title={LAVA: Large-scale Automated Vulnerability Addition},
  author={Dolan-Gavitt, Brendan and Hulin, Patrick and Kirda, Engin and Leek, Tim and Mambretti, Andrea and Robertson, Wil and Ulrich, Frederick and Whelan, Ryan},
  year={2016}
}

@article{richardson1993analysis,
  title={An analysis of test data selection criteria using the RELAY model of fault detection},
  author={Richardson, Debra J and Thompson, Margaret C},
  journal={IEEE Transactions on Software Engineering},
  volume={19},
  number={6},
  pages={533--553},
  year={1993},
  publisher={IEEE}
}

@article{voas1992pie,
  title={PIE: A dynamic failure-based technique},
  author={Voas, Jeffrey M.},
  journal={IEEE Transactions on Software Engineering},
  volume={18},
  number={8},
  pages={717--727},
  year={1992},
  publisher={IEEE}
}

@book{viega2001building,
  title={Building Secure Software: How to Avoid Security Problems the Right Way},
  author={Viega, John and McGraw, Gary},
  year={2001},
  publisher={Pearson Education}
}

@book{cheswick2003firewalls,
  title={Firewalls and Internet security: repelling the wily hacker},
  author={Cheswick, William R and Bellovin, Steven M and Rubin, Aviel D},
  year={2003},
  publisher={Addison-Wesley Longman Publishing Co., Inc.}
}

@article{okun2009static,
  title={Static analysis tool exposition (SATE) 2008},
  author={Okun, Vadim and Gaucher, Romain and Black, Paul E},
  journal={NIST special publication},
  volume={5},
  number={00-2},
  pages={79},
  year={2009}
}

@article{okun2010second,
  title={The second static analysis tool exposition (SATE) 2009},
  author={Okun, Vadim and Delaitre, Aurelien and Black, Paul E},
  journal={NIST special publication},
  pages={500--287},
  year={2010}
}

@article{okun2011report,
  title={Report on the third static analysis tool exposition (SATE 2010)},
  author={Okun, Vadim and Delaitre, Aurelien and Black, Paul E},
  journal={NIST special publication},
  pages={500--283},
  year={2011},
  publisher={Citeseer}
}

@article{okun2013report,
  title={Report on the static analysis tool exposition (SATE) IV},
  author={Okun, Vadim and Delaitre, Aurelien and Black, Paul E},
  journal={NIST Special Publication},
  volume={500},
  pages={297},
  year={2013}
}

@article{okun2016sate,
  title={SATE V Report},
  author={Okun, Vadim and Delaitre, Aurelien and Black, Paul E and Stivalet, Bertrand and Ribeiro, Athos},
  journal={NIST Special Publication},
  volume={500},
  year={2016}
}
  
@inproceedings{ernst2003static,
  title={Static and dynamic analysis: Synergy and duality},
  author={Ernst, Michael D},
  booktitle={WODA 2003: ICSE Workshop on Dynamic Analysis},
  pages={24--27},
  year={2003}
}

@inproceedings{kass2005nist,
  title={NIST Software Assurance Metrics And Tool Evaluation (SAMATE project)},
  author={Kass, Michael},
  booktitle={Workshop on the Evaluation of Software Defect Detection Tools},
  pages={73--74},
  year={2005}
}

@Online{nist2016classes,
    author          =   {National Institute of Standards and Technology},
    title           =   {Classes of Tools and Techniques},
    year            =   {2016},
    url             =   {https://samate.nist.gov/index.php/Tool_Survey.html},
    notes           =   {accessed: 15-July-2016}
}

@inproceedings{delaitre2013massive,
  title={Of Massive Static Analysis Data},
  author={Delaitre, Aurelien and Okun, Vadim and Fong, Elizabeth},
  booktitle={Software Security and Reliability-Companion (SERE-C), 2013 IEEE 7th International Conference on},
  pages={163--167},
  year={2013},
  organization={IEEE}
}

@inproceedings{delaitre2015evaluating,
  title={Evaluating Bug Finders---Test and Measurement of Static Code Analyzers},
  author={Delaitre, Aurelien and Stivalet, Bertrand and Fong, Elizabeth and Okun, Vadim},
  booktitle={Complex Faults and Failures in Large Software Systems (COUFLESS), 2015 IEEE/ACM 1st International Workshop on},
  pages={14--20},
  year={2015},
  organization={IEEE}
}

@article{black2007source,
  title={Source code security analysis tool functional specification version 1.1},
  author={Black, Paul E and Kass, Michael and Koo, Michael and Fong, Elizabeth},
  journal={NIST Special Publication},
  volume={500},
  pages={268},
  year={2007}
}

@Online{mitre2016cve,
    title           =   {Common Vulnerabilities and Exposure},
    author          =   {The MITRE Corporation},
    url             =   {https://cve.mitre.org/},
    notes           =   {accessed: 22-August-2016}
}

@Online{mitre2016cwe,
    title           =   {Common Weakness Enumeration},
    author          =   {The MITRE Corporation},
    url             =   {https://cwe.mitre.org/},
    notes           =   {accessed: 3-September-2016}
}

@Online{nsa2016juliet,
    title           =   {Juliet Test Suite},
    author          =   {National Security Agency (NSA) Center for Assured Software (CAS)},
    url             =   {https://samate.nist.gov/SRD/testsuite.php},
    notes           =   {accessed: 22-August-2016}
}

@Online{frama2016c,
    title           =   {Frama-C Software Analyzer},
    url             =   {http://frama-c.com/},
    notes           =   {accessed: 24-August-2016}
}

@Online{hewlett2016fortify,
    title           =   {Fortify Static Code Analyzer},
    author          =   {Hewlett Packard Enterprise},
    url             =   {http://www8.hp.com/us/en/software-solutions/static-code-analysis-sast/},
    notes           =   {accessed: 24-August-2016}
}

@Online{institute2016static,
    title           =   {Static Analysis vs. Dynamic Analysis},
    author          =   {Institute for System Programming of the Russian Academy of Science},
    url             =   {http://linuxtesting.org/static-vs-dynamic},
    notes           =   {accessed: 25-August-2016}
}

@article{black2009static,
  title={Static analyzers in software engineering},
  author={Black, Paul E},
  journal={The Journal of Defense Software Engineering},
  volume={22},
  number={3},
  pages={16--17},
  year={2009}
}

@article{anderson2008use,
  title={The use and limitations of static-analysis tools to improve software quality},
  author={Anderson, Paul},
  journal={CrossTalk: The Journal of Defense Software Engineering},
  volume={21},
  number={6},
  pages={18--21},
  year={2008},
  publisher={Citeseer}
}

@Online{wikipedia2016halting,
    title           =   {Halting Problem},
    author          =   {Wikipedia},
    url             =   {https://en.wikipedia.org/wiki/Halting_problem},
    notes           =   {accessed: 26-August-2016}
}

@Online{wikibooks2016compiler,
    title           =   {Compiler Construction/Lexical Analysis},
    author          =   {Wikibooks},
    url             =   {https://en.wikibooks.org/wiki/Compiler_Construction/Lexical_analysis},
    notes           =   {accessed: 30-August-2016}
}

@misc{collin2015compilation,
    title           =   {Compilation des Langages},
    author          =   {Collin, Suzanne},
    organization    =   {TELECOM Nancy},
    year            =   {2015}
}

@Online{wikipedia2016fault,
    title           =   {Fault Injection},
    author          =   {Wikipedia},
    url             =   {https://en.wikipedia.org/wiki/Fault_injection},
    notes           =   {accessed: 3-September-2016}
}

@Online{wikipedia2016mutation,
    title           =   {Mutation Testing},
    author          =   {Wikipedia},
    url             =   {https://en.wikipedia.org/wiki/Mutation_testing},
    notes           =   {accessed: 3-September-2016}
}

@Online{iarpa2014stonesoup,
    title           =   {IARPA STONESOUP Phase 3 Test Generation Report},
    author          =   {Office of the Director of National Intelligence},
    url             =   {https://samate.nist.gov/SARD/resources/STONESOUP_Test_Generation_Report.pdf},
    notes           =   {accessed: 3-September-2016}
}

@Online{dolan2016million,
    title           =   {How to Add a Million Bugs to a Program (and Why You Might Want to)},
    author          =   {Dolan-Gavitt, Brendan},
    url             =   {https://dzone.com/articles/how-to-add-a-million-bugs-to-a-program-and-why-you},
    notes           =   {accessed: 3-September-2016}
}

@Online{dolan2016mechanics,
    title           =   {The Mechanics of Bug Injection With LAVA},
    author          =   {Dolan-Gavitt, Brendan},
    url             =   {https://dzone.com/articles/the-mechanics-of-bug-injection-with-lava},
    notes           =   {accessed: 3-September-2016}
}

@Online{owasp2016top,
    title           =   {OWASP Top Ten Vulnerabilities},
    author          =   {OWASP},
    url             =   {https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project},
    notes           =   {accessed: 4-September-2016}
}

@Online{vmware2016official,
    title           =   {VMWare Official Website},
    author          =   {VMWare},
    url             =   {http://www.vmware.com/},
    notes           =   {accessed: 4-September-2016}
}

@Online{virtualbox2016official,
    title           =   {VirtualBox Official Website},
    author          =   {VirtualBox},
    url             =   {https://www.virtualbox.org/},
    notes           =   {accessed: 4-September-2016}
}

@Online{wheeler2016sloccount,
    title           =   {Sloccount Official Website},
    author          =   {Wheeler, David A.},
    url             =   {http://www.dwheeler.com/sloccount/},
    notes           =   {accessed: 5-September-2016}
}

@Online{bitcoin2016github,
    title           =   {Bitcoin GitHub Repository},
    author          =   {Bitcoin},
    url             =   {https://github.com/bitcoin/bitcoin},
    notes           =   {accessed: 5-September-2016}
}

@Online{llnl2016rose,
    title           =   {ROSE Compiler Infrastructure},
    author          =   {Lawrence Livermore National Laboratory},
    url             =   {http://rosecompiler.org/},
    notes           =   {accessed: 5-September-2016}
}