Prioritizing Alerts from Static Analysis with Classification Models

The number of security-related code flaws detected by static analysis requires too much effort to triage. This poster describes CERT Division research on an automated and accurate statistical classifier.