Multi-Cluster Visualization and Live Reporting of Static Analysis Security Testing (SAST) Warnings

No ratings

Presented at IEEESecDev 2019 by

Abhishek Pathak

Kaarthik Sivakumar

Mazhar Haque

Prasanna Ganesan

This short paper discusses a case study of multicluster visualization of Static Analysis Security Testing (SAST)warnings in large clusters catering to a majority of Ciscoproducts in hierarchical organizational and checker views. Thisserves as a one stop shop for real-time visualization of StaticAnalysis (SA) warning trends, chart, downloading reports, andto effectively address the potential security weaknesses detected.Presently leading SAST tools like Coverity, codesonar,Klocwork etc do not provide inter-cluster or enterprise-widevisualization to effectively address the SA warnings.