Project 2 - V&V SW Analysis II

ANS-1Static code analysis is a popular software development practice performed in the early “creation” stages of development. In this analysis process, developers examine the source code they’ve created before executing it.

Static code analysis is used to identify potential vulnerabilities, errors, and deviations from coding standards early in the development process. It also helps teams comply with coding guidelines like MISRA and industry standards like ISO 26262.

When implemented effectively, static code analysis and the early error detection it offers can help your development team achieve the following:

• Code consistency through enforcing coding standards and best practices that keep your codebase maintainable and readable.
• Stronger code security through catching potential vulnerabilities like SQL injection, buffer overflows, and XSS attacks.
• Cost savings by detecting and fixing issues early in development instead of addressing them in later stages or post-release, when fixes become more complex and issues may have already affected customers.

ANS -2 Integration Testing is defined as a type of testing where software modules are integrated logically and tested as a group. A typical software project consists of multiple software modules, coded by different programmers. The purpose of this level of testing is to expose defects in the interaction between these software modules when they are integrated

Integration Testing focuses on checking data communication amongst these modules. Hence it is also termed as ‘I & T’ (Integration and Testing),‘String Testing’ and sometimes ‘Thread Testing’.