Search papers, labs, and topics across Lattice.
This literature review investigates the barriers developers face in adopting Static Application Security Testing (SAST) tools, which are crucial for identifying and mitigating code vulnerabilities that can lead to significant security breaches. The study reveals a range of usability issues, some stemming from the tools themselves and others from the developers' reluctance to invest the necessary effort to integrate these tools into their workflows. The authors argue that addressing both technical shortcomings and human factors is essential for increasing the adoption and effective use of SAST tools in software development.
Developers are hesitant to adopt SAST tools due to usability challenges and a lack of perceived value, highlighting the need for both tool improvement and a cultural shift in software security practices.
Developers face a challenging problem with no clear solution. Modern software breaches can wreak havoc on businesses and individuals alike. With code vulnerabilities being a leading cause, securing applications must be a priority for developers. Static Application Security Testing (SAST) has the potential to harden applications by assisting in the identification and resolution of security vulnerabilities. Despite this, many development teams have not adopted SAST tools into their environment. In this paper, we survey the recent literature to uncover why some developers are apprehensive towards SAST and identify what specific problems they encounter when using it. We found a variety of usability problems developers face when using SAST. Some are inherent of the tool and ultimately require some level of developer investment while others are tool shortcomings that SAST tool creators must address. Ultimately, we argue that in order to drive widespread adoption and consistent SAST usage, developers will need to embrace that some investment is required. Simultaneously, developers will be more likely to integrate SAST tools into their workflows if the creators of SAST tools simplify many aspects related to tool usage. Surmounting the primary obstacles preventing the adoption of SAST requires full consideration of both the technical and human factors.
