Abstract—No single software fault-detection technique is capable of addressing all fault-detection concerns. Similarly to software
reviews and testing, static analysis tools (or automated static analysis) can be used to remove defects prior to release of a software
product. To determine to what extent automated static analysis can help in the economic production of a high-quality product, we have
analyzed static analysis faults and test and customer-reported failures for three large-scale industrial software systems developed at
Nortel Networks. The data indicate that automated static analysis is an affordable means of software fault detection. Using the
Orthogonal Defect Classification scheme, we found that automated static analysis is effective at identifying Assignment and Checking
faults, allowing the later software production phases to focus on more complex, functional, and algorithmic faults. A majority of the
defects found by automated static analysis appear to be produced by a few key types of programmer errors and some of these types
have the potential to cause security vulnerabilities. Statistical analysis results indicate the number of automated static analysis faults
can be effective for identifying problem modules. Our results indicate static analysis tools are complementary to other fault-detection
techniques for the economic production of a high-quality software product.

Quoted: Klocwork provides automation technology or static analysis tools for source code analysis, defect detection and defect prevention, such as code defects, structure defects, security defects, code review, code analysis as well as design analysis and modeling, including code refactoring and rearchitecturing. Klocwork is a leading provider of automation technology that allows software development organizations to dramatically decrease product development cycle while at the same time achieving outstanding quality of software code.