T/EGAG 013.1-2022 Source Code Defect Detection Tool Part 1: Quality Test Specification
T/EGAG 013.1-2022
Basic Information
Scope
Scope: This part of T/EGAG 013 specifies the test indicators, test methods, and requirements for functional, performance efficiency, reliability, and usability testing of source code defect detection tools. This part is applicable to third-party organizations conducting quality testing and evaluation of source code defect detection tools, and it can also be used as a reference for enterprises to improve and evaluate their own source code defect detection tools internally. Main technical content: This part specifies the test indicators, test methods, and requirements for functional, performance efficiency, reliability, and usability testing of source code defect detection tools. It is applicable to third-party organizations conducting quality testing and evaluation of source code defect detection tools, and it can also be used as a reference for enterprises to improve and evaluate their own source code defect detection tools internally. 1. Overall framework of the tool: The technical framework of the source code defect detection tool includes five layers: parsing layer, basic analysis layer, analysis model layer, analysis application layer, and service layer. 2. Quality testing indicators: The quality testing items of the source code defect detection tool are regulated from six aspects: product documentation, functionality, performance efficiency, reliability, usability, and portability. For example, the product documentation should explain the tool name and tool software version number; the functionality testing items include CWE defect pattern library, security vulnerability library, custom detection rules, code metrics, and test result management; the usability includes intuitiveness, consistency, and rationality. 3. Quality testing methods: The testing methods, test environment, product documentation indicators testing methods, functionality indicators testing methods, performance efficiency indicators testing methods, reliability indicators testing methods, usab