为静态代码分析工具(如FindBugs)编写自定义bug检测器可以显著提高代码质量，并且有许多乐趣。

Writing custom bug detectors for a static code analysis tool such as FindBugs can offer tremendous leverage in improving code quality, and it can be a lot of fun.

youdao

现有的采用基于源代码分析的漏洞静态检测方法中存在的主要问题是误报率和漏报率较高。

The main problem of existing static vulnerability detection methods based source code analysis is their high false positive and false negative rates.

youdao

核心内容包括了基于白箱测试的思想，通过对源代码进行静态分析，实现对代码的安全检查和对代码剽窃的自动检测。

The core content is the implementation of code security and code plagiarism detect via static analysis of source codes based on the idea of white box test.

youdao