Advanced Code Analysis In .NET

•

2 likes•5,781 views

This document discusses advanced code analysis in .NET. It introduces various static and dynamic analysis tools that can analyze source code, detect issues, and provide visualizations and metrics. These tools include FxCop, StyleCop, ReSharper, and Gendarme for static analysis as well as dotCover, OpenCover, and nCover for dynamic analysis. The document argues that while code analysis faces some objections, taking a "blueprint, analyze, improve" approach and using the right tools can provide benefits like increased code quality.

Advanced Code Analysis in .NET

Stephen Ritchie
July 10, 2012

Stephen D. Ritchie – Senior Consultant – Excella Consulting, Inc., 2300 Wilson Blvd, Suite 630, Arlington, VA 22201 – 703.840.8600 – http://excella.com

Da Vinci Code … Analyzer

Stephen D. Ritchie 4

Code Analysis

Static
versus

Stephen D. Ritchie 5

1940 Tacoma Narrows Bridge

• Video
– http://archive.org/download/SF121/SF121_51
2kb.mp4

Stephen D. Ritchie 9

Static Analysis

Source Visualizations
Code Checks
Assembly Metrics
Detections
Stephen D. Ritchie 10

Dynamic Analysis

Visualizations
Checks
Metrics
Detections
Stephen D. Ritchie 11

Code Analysis: Objection 1

Sweating the small stuff
Nitpicking Useless
“Don’t make the
same mistake once.”
Stephen D. Ritchie 12

Code Analysis: Objection 2

Not worth the effort
Low ROI No Bandwidth

“Crawl, Walk, Run”
Stephen D. Ritchie 13

Code Analysis: Objection 3

No authorization
Forbidden
Can’t Fix Issues
“Speak truth to power.”
Stephen D. Ritchie 14

Blueprint

1

Analyze

2

Monitor Improve
3

Stephen D. Ritchie 15

Toolbox

FxCop
Detections
Checks
Visual
Studio
http://blogs.msdn.com/b/codeanalysis/
Stephen D. Ritchie 16

Toolbox

StyleCop
Detections
Checks

http://stylecop.codeplex.com/
Stephen D. Ritchie 17

Toolbox

ReSharper
http://www.jetbrains.com/resharper/
Detections
Checks
Gendarme
http://www.mono-project.com/Gendarme

Stephen D. Ritchie 18

Toolbox

Simian
Detections

http://www.harukizaemon.com/simian/

Stephen D. Ritchie 20

The Master Craft

Duplicates Finder .NET

http://www.jetbrains.com/teamcity/

Clone Doctor
Semantic Designs
http://www.semdesigns.com/Products/Clone/
Stephen D. Ritchie 21

Dynamic Analysis

Code Coverage
Stephen D. Ritchie 22

Toolbox

dotCover

http://www.jetbrains.com/dotcover/

Stephen D. Ritchie 23

Toolbox

Open Cover

http://nuget.org/packages/OpenCover

Stephen D. Ritchie 24

The Master Craft

http://www.ncover.com/

Stephen D. Ritchie 25

Dynamic Analysis

Sampling
Instrumentation
Stephen D. Ritchie 26

Toolbox

Performance

Stephen D. Ritchie 27

Toolbox

Performance

http://www.jetbrains.com/profiler/

Stephen D. Ritchie 28

The Master Craft

Memory
Queries
Logging
Security
Stephen D. Ritchie 30

Static Analysis

Source Visualizations
Code Checks
Assembly Metrics
Detections
Stephen D. Ritchie 31

The Master Craft

Code Quality
Visualizations http://www.ndepend.com/
Checks
Metrics
Detections http://www.lattix.com/

Stephen D. Ritchie 32

Hanselman’s Placemat

http://bit.ly/LwKfwK
Stephen D. Ritchie 33

Shameless Self-promotion

http://amzn.to/v8TD8E

Stephen D. Ritchie 34

Stephen’s Contact Info

• Twitter: @ruthlesshelp

• Email: stephen.ritchie@excella.com

• Blog: http://ruthlesslyhelpful.net

• LinkedIn:
http://www.linkedin.com/in/sritchie

Stephen D. Ritchie 35

The practice of continuous integration (CI) has the ability to transform software development from a set of manual processes to a logical series of reproducible, automated processes. There are three concepts that are key to continuous integration; the blueprint, the toolbox, and the master craft. This session presents the CI lifecycle as a blueprint. You will see and understand the series of development processes that establish an effective, automated progression from source code to a packaged deliverable. You will learn about the CI server, which is the fundamental tool that initiates, performs, coordinates, and reports throughout the CI phases. The toolbox includes both the CI server and the combination of technologies that support CI. Continuous integration is a master craft of Agile engineering. To help you be effective with continuous integration, this talk demonstrates both the knowledge and skills needed to achieve the desired results of CI and to maximize its value.

Advanced Code Analysis with .NET

Stephen Ritchie

Continuous Integration DCAEC12

Stephen Ritchie

Test Driven Development: Blueprint, Toolbox, and Master Craft

Stephen Ritchie

Many say that the practice of test driven development (TDD) has the ability to transform software engineering. Let’s break it down from a skeptical pragmatist’s viewpoint. This presentation focuses on three key ideas; the blueprint, the toolbox, and the master craft. Let’s look at TDD as a blueprint for writing code and discuss the implications and benefit. Let’s go beyond the theoretical application of TDD and focus on the toolbox, with examples of what developers need to know to get going. Finally, TDD is a master craft of Agile engineering. To be effective with TDD, let’s look at the progression of skills needed to achieve the promised results of TDD and to maximize its value. Stephen is the organizer of DC Alt.Net (http://bit.ly/ZRDxUj). He frequent speaker and trainer on many .NET topics, including automated testing, continuous integration, code analysis, and .NET best practices.Stephen is the author of the book "Pro .NET Best Practices" (http://amzn.to/v8TD8E).

Continuous Integration - NoVA CodeCamp 2014-10-11Stephen Ritchie

“Writing code that lasts” … or writing code you won’t hate tomorrow. - #PHPSRB16

Rafael Dohms

As developers we write code everyday, only to frown at it a week after that. Why do we have such a hard time with code written by others and ourselves, this raging desire to rewrite everything we see? Writing code that survives the test of time and self judgment is a matter of clarity and simplicity. Let's talk about growing, learning and improving our code with calisthenics, readability and good design.

“Writing code that lasts” … or writing code you won’t hate tomorrow.

Rafael Dohms

Writing Code That Lasts - #Magento2Seminar, Utrecht

Rafael Dohms

The world runs on legacy code. For every greenfield progressive web app with 100% test coverage, there are literally hundreds of archaic line-of-business applications running in production - systems with no tests, no documentation, built using out-of-date tools, languages and platforms. It’s the code developers love to hate: it’s not exciting, it’s not shiny, and it won’t look good on your CV - but the world runs on legacy code, and, as developers, if we’re going to work on anything that actually matters, we’re going to end up dealing with legacy. To work effectively with this kind of system, we need to answer some fundamental questions: why was it built this way in the first place? What's happened over the years it's been running in production? And, most importantly, how can we develop our understanding of legacy codebases to the point where we're confident that we can add features, fix bugs and improve performance without making things worse?

Java Generics Adoption: How New Features are Introduced Championed or Ignored

Chris Parnin

Adding features to a programming language is a difficult prospect. Politics, committees, compatibility, and egos don’t make it any easier. And once a feature has finally made it and shipped, there is a whole other question of how does it plays out? Did designers get it right, does adoption occur? Does the promises of the new feature actually solve the software developer’s pain? How do developers decide to use a new feature, do they plan to migrate old code, coordinate coding standards?

DevTechDocsOps

VMware Tanzu

Continuous Integration: Blueprint, Toolbox, Master Craft

Excella

Continuous Integration: Toolbox, Blueprint, Master Craft

DC Agile Engineering Conference

DevOps Requires Agility

Stephen Ritchie

DevOps emphasizes communication, collaboration and integration between the developers and the operations folks. Some teams figure out DevOps on their own, but most struggle in their effort to implement DevOps practices, such as, automated builds, automated tests, automated deployments, continuous integration, and continuous delivery. Many consider these practices essential for the success of any software development project, but they require a new way of thinking. In other words: DevOps requires agility.

SF Bay Area Splunk User Group Meeting October 5, 2022

Becky Burwell

Petcube. How to build a hardware startup from scratch

Alex Neskin

Metrics for aglie teams

Richard Fichtner

In agile software development, the focus is on adapting to changing conditions or requirements and optimizing the process continuously. Adaptations and optimizations are driven by the development team itself. To be able to judge the course of an iteration reasonably, metrics are generally used. The main objective of this talk it to propose metrics and appropriate visualizations to answer questions of agile development teams. The metrics provide team members with better access to the metadata of their own work. This is intended to enable the team to better understand their own work and to adapt their processes meaningfully based on the information obtained.

Semantics And Multimedia

Peter Berger

Cryptocurrency && Ruby

Dilum Navanjana

api-driven-development.pdf

DivyanshGupta922023

Blue team reboot - HackFest

Haydn Johnson

Co Speaker: Cheryl Biswas Talk Description: How about this: a blue team talk given by red teamers. But here’s our rationale - your best defence right now is a strategic offence. The rules of the game have changed and we need to get defence up to speed. We’ll show you what the key elements are in a good defence strategy; what you can and need to be using to full advantage. We’ll talk about the new “buzzwords” and how they apply: visibility; patterns; big data. There’s a whole lotta data to wrangle, and you aren’t seeing the whole picture if you aren’t doing things right. Threat intel is about getting the big picture as it applies to you. You’ll learn the importance of context and prioritization so that you can manipulate intel feeds to do your bidding. And then we’ll take things further and talk about hunting the adversary, using an update on proven methodologies. We’ll show you how to understand your data, correlate threats and pin point attacks. Attendees will leave with a new understanding of the resources they have on hand, and how to leverage those into an Adaptive Proactive Defense Strategy.

Overview of .NET Best Practices

Stephen Ritchie

Lightweight Documentation

Stephen Ritchie

Agile Engineering Sparker GLASScon 2015

Stephen Ritchie

Lightweight Documentation: An Agile Approach

Stephen Ritchie

One of the values of the Agile manifesto is working software over comprehensive documentation. However many agile teams think that now we are Agile we don’t need to document. Come to this session to learn about lightweight documentation and how to strike a sensible balance between working software and documentation. Learn which documents are necessary and which documents you can do without as well. Learn about JIT lightweight alternatives to our tradition documentation set. Leave with specific techniques to evaluate the value of each document along with recommended alternatives.

Continuous Integration: Blueprint, Toolbox, Master Craft

Stephen Ritchie

Dc scrum agile_eng_20130923

Stephen Ritchie

Scrum and Agile Engineering Practices - What every ScrumMaster needs to know Some Agile teams fail to figure out or implement technical practices that are necessary for long term success. Practices like automated builds, automated tests, automated deployments, continuous integration, and continuous delivery are now considered essential for the success of any software development project. Join us for a tour of software engineering best practices. We'll discuss what these practices are and their impact on scope, schedule, cost, resources and quality. We'll also share some ideas on how to start adopting these practices and how to incrementally introduce them and gradually improve your team's software development process.

What's hot

“Writing code that lasts” … or writing code you won’t hate tomorrow.

Rafael Dohms

“Writing code that lasts” … or writing code you won’t hate tomorrow.

Rafael Dohms

Writing code that lasts - JAB14

Rafael Dohms

.NET Fest 2018. Dylan Beattie. Ctrl-Alt-Del: Learning to Love Legacy Code

NETFest

Java Generics Adoption: How New Features are Introduced Championed or Ignored

Chris Parnin

DevTechDocsOps

VMware Tanzu

What's hot (6)

“Writing code that lasts” … or writing code you won’t hate tomorrow.

Writing code that lasts - JAB14

.NET Fest 2018. Dylan Beattie. Ctrl-Alt-Del: Learning to Love Legacy Code

Java Generics Adoption: How New Features are Introduced Championed or Ignored

DevTechDocsOps

Similar to Advanced Code Analysis In .NET

Continuous Integration: Blueprint, Toolbox, Master Craft

Excella

Continuous Integration: Toolbox, Blueprint, Master Craft

DC Agile Engineering Conference

DevOps Requires Agility

Stephen Ritchie

SF Bay Area Splunk User Group Meeting October 5, 2022

Becky Burwell

Petcube. How to build a hardware startup from scratch

Alex Neskin

Metrics for aglie teams

Richard Fichtner

Semantics And Multimedia

Peter Berger

Cryptocurrency && Ruby

Dilum Navanjana

api-driven-development.pdf

DivyanshGupta922023

Blue team reboot - HackFest

Haydn Johnson

Similar to Advanced Code Analysis In .NET (10)

Continuous Integration: Blueprint, Toolbox, Master Craft

Continuous Integration: Toolbox, Blueprint, Master Craft

DevOps Requires Agility

SF Bay Area Splunk User Group Meeting October 5, 2022

Petcube. How to build a hardware startup from scratch

Metrics for aglie teams

Semantics And Multimedia

Cryptocurrency && Ruby

api-driven-development.pdf

Blue team reboot - HackFest

More from Stephen Ritchie

Overview of .NET Best Practices

Stephen Ritchie

Lightweight Documentation

Stephen Ritchie

Agile Engineering Sparker GLASScon 2015

Stephen Ritchie

Lightweight Documentation: An Agile Approach

Stephen Ritchie

Continuous Integration: Blueprint, Toolbox, Master Craft

Stephen Ritchie

Dc scrum agile_eng_20130923

Stephen Ritchie

Agile Testing Best Practices

Stephen Ritchie

Have you ever bumped into a wall with your automated tests? Many developers bump into various roadblocks and hurdles when writing test code. Are your test methods starting to fail because the code-under-test uses the current date and time? Are your automated integration tests failing because the database they integrate with keeps changing? Do you have an explosion of test methods, with the ratio of test code to code-under-test way too high? Is your effort to refactor and improve code overwhelmed by the time it takes to rewrite all those failing unit tests? This presentation is about clearing away Agile testing obstacles, avoiding common pitfalls, and staying away from dangerous practices.

An Overview of .NET Best Practices

Stephen Ritchie

This presentation is a practical overview of many of the best practices that you can apply to your .NET projects today. We will cover a broad range of practices and principles with an emphasis on tools and technologies in four key areas: build automation, continuous integration, automated testing, and code analysis. Since complex problems often require iterative solutions, this presentation looks at an iterative approach to adopting new and better practices. Through a stepwise process we’ll examine key areas to improve, how to get started and continue to grow implementation, and what might motivate folks to stick with .NET best practices.

Overcoming the Obstacles, Pitfalls, and Dangers of Unit Testing

Stephen Ritchie

Have you ever bumped into a wall with your automated tests? Many developers bump into various roadblocks and hurdles when writing test code. Are your test methods starting to fail because the code-under-test uses DateTime.Now? Are your automated integration tests failing because the database they integrate with keeps changing? Do you have an explosion of test methods, with the ratio of test code to code-under-test way too high? Is your effort to refactor and improve code overwhelmed by the time it takes to rewrite all those failing unit tests? This presentation is about clearing away automated testing obstacles, avoiding common pitfalls, and staying away from dangerous practices.

An Overview of .NET Best Practices

Stephen Ritchie

DCDNUG 10/16/2012 Automated testing obstacles pitfalls dangersStephen Ritchie

Automated Testing: Obstacles, Pitfalls, and DangersStephen Ritchie

Automated Testing with DatabasesStephen Ritchie

More from Stephen Ritchie (13)

Overview of .NET Best Practices

Lightweight Documentation

Agile Engineering Sparker GLASScon 2015

Lightweight Documentation: An Agile Approach

Continuous Integration: Blueprint, Toolbox, Master Craft

Dc scrum agile_eng_20130923

Agile Testing Best Practices

An Overview of .NET Best Practices

Overcoming the Obstacles, Pitfalls, and Dangers of Unit Testing

An Overview of .NET Best Practices

DCDNUG 10/16/2012 Automated testing obstacles pitfalls dangers

Automated Testing: Obstacles, Pitfalls, and Dangers

Automated Testing with Databases

Recently uploaded

How to Get CNIC Information System with Paksim Ga.pptx

danishmna97

みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...

名前です男

Introduction to CHERI technology - Cybersecurity

mikeeftimakis1

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...

Neo4j

Dr. Sean Tan, Head of Data Science, Changi Airport Group Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.

GridMate - End to end testing is a critical piece to ensure quality and avoid...

ThomasParaiso2

GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024

Neo4j

GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024

Neo4j

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

RESUME BUILDER APPLICATION Project for students

KAMESHS29

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Artificial Intelligence for XMLDevelopment

Octavian Nadolu

In the rapidly evolving landscape of technologies, XML continues to play a vital role in structuring, storing, and transporting data across diverse systems. The recent advancements in artificial intelligence (AI) present new methodologies for enhancing XML development workflows, introducing efficiency, automation, and intelligent capabilities. This presentation will outline the scope and perspective of utilizing AI in XML development. The potential benefits and the possible pitfalls will be highlighted, providing a balanced view of the subject. We will explore the capabilities of AI in understanding XML markup languages and autonomously creating structured XML content. Additionally, we will examine the capacity of AI to enrich plain text with appropriate XML markup. Practical examples and methodological guidelines will be provided to elucidate how AI can be effectively prompted to interpret and generate accurate XML markup. Further emphasis will be placed on the role of AI in developing XSLT, or schemas such as XSD and Schematron. We will address the techniques and strategies adopted to create prompts for generating code, explaining code, or refactoring the code, and the results achieved. The discussion will extend to how AI can be used to transform XML content. In particular, the focus will be on the use of AI XPath extension functions in XSLT, Schematron, Schematron Quick Fixes, or for XML content refactoring. The presentation aims to deliver a comprehensive overview of AI usage in XML development, providing attendees with the necessary knowledge to make informed decisions. Whether you’re at the early stages of adopting AI or considering integrating it in advanced XML development, this presentation will cover all levels of expertise. By highlighting the potential advantages and challenges of integrating AI with XML development tools and languages, the presentation seeks to inspire thoughtful conversation around the future of XML development. We’ll not only delve into the technical aspects of AI-powered XML development but also discuss practical implications and possible future directions.

Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI

Vladimir Iglovikov, Ph.D.

Presented by Vladimir Iglovikov: - https://www.linkedin.com/in/iglovikov/ - https://x.com/viglovikov - https://www.instagram.com/ternaus/ This presentation delves into the journey of Albumentations.ai, a highly successful open-source library for data augmentation. Created out of a necessity for superior performance in Kaggle competitions, Albumentations has grown to become a widely used tool among data scientists and machine learning practitioners. This case study covers various aspects, including: People: The contributors and community that have supported Albumentations. Metrics: The success indicators such as downloads, daily active users, GitHub stars, and financial contributions. Challenges: The hurdles in monetizing open-source projects and measuring user engagement. Development Practices: Best practices for creating, maintaining, and scaling open-source libraries, including code hygiene, CI/CD, and fast iteration. Community Building: Strategies for making adoption easy, iterating quickly, and fostering a vibrant, engaged community. Marketing: Both online and offline marketing tactics, focusing on real, impactful interactions and collaborations. Mental Health: Maintaining balance and not feeling pressured by user demands. Key insights include the importance of automation, making the adoption process seamless, and leveraging offline interactions for marketing. The presentation also emphasizes the need for continuous small improvements and building a friendly, inclusive community that contributes to the project's growth. Vladimir Iglovikov brings his extensive experience as a Kaggle Grandmaster, ex-Staff ML Engineer at Lyft, sharing valuable lessons and practical advice for anyone looking to enhance the adoption of their open-source projects. Explore more about Albumentations and join the community at: GitHub: https://github.com/albumentations-team/albumentations Website: https://albumentations.ai/ LinkedIn: https://www.linkedin.com/company/100504475 Twitter: https://x.com/albumentations

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

Microsoft - Power Platform_G.Aspiotis.pdf

Uni Systems S.M.S.A.

Large Language Model (LLM) and it’s Geospatial Applications

Rohit Gautam

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

Uni Systems Copilot event_05062024_C.Vlachos.pdf

Uni Systems S.M.S.A.

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Climate Impact of Software Testing at Nordic Testing Days

Kari Kakkonen

My slides at Nordic Testing Days 6.6.2024 Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.

Recently uploaded (20)

How to Get CNIC Information System with Paksim Ga.pptx

Introduction to CHERI technology - Cybersecurity

A tale of scale & speed: How the US Navy is enabling software delivery from l...

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...

GridMate - End to end testing is a critical piece to ensure quality and avoid...

GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024

GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024

Removing Uninteresting Bytes in Software Fuzzing

RESUME BUILDER APPLICATION Project for students

Essentials of Automations: The Art of Triggers and Actions in FME

Artificial Intelligence for XMLDevelopment

Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Microsoft - Power Platform_G.Aspiotis.pdf

Large Language Model (LLM) and it’s Geospatial Applications

Epistemic Interaction - tuning interfaces to provide information for AI support

Uni Systems Copilot event_05062024_C.Vlachos.pdf

DevOps and Testing slides at DASA Connect

Climate Impact of Software Testing at Nordic Testing Days

Advanced Code Analysis In .NET

1. Advanced Code Analysis in .NET Stephen Ritchie July 10, 2012 Stephen D. Ritchie – Senior Consultant – Excella Consulting, Inc., 2300 Wilson Blvd, Suite 630, Arlington, VA 22201 – 703.840.8600 – http://excella.com

2. Blueprint Stephen D. Ritchie 2

3. Toolbox Stephen D. Ritchie 3

4. Da Vinci Code … Analyzer Stephen D. Ritchie 4

5. Code Analysis Static versus Stephen D. Ritchie 5

6. Static Analysis Stephen D. Ritchie 6

7. But wait … Stephen D. Ritchie 7

8. 1940 Tacoma Narrows Bridge • Video – http://archive.org/download/SF121/SF121_51 2kb.mp4 Stephen D. Ritchie 9

9. Static Analysis Source Visualizations Code Checks Assembly Metrics Detections Stephen D. Ritchie 10

10. Dynamic Analysis Visualizations Checks Metrics Detections Stephen D. Ritchie 11

11. Code Analysis: Objection 1 Sweating the small stuff Nitpicking Useless “Don’t make the same mistake once.” Stephen D. Ritchie 12

12. Code Analysis: Objection 2 Not worth the effort Low ROI No Bandwidth “Crawl, Walk, Run” Stephen D. Ritchie 13

13. Code Analysis: Objection 3 No authorization Forbidden Can’t Fix Issues “Speak truth to power.” Stephen D. Ritchie 14

14. Blueprint 1 Analyze 2 Monitor Improve 3 Stephen D. Ritchie 15

15. Toolbox FxCop Detections Checks Visual Studio http://blogs.msdn.com/b/codeanalysis/ Stephen D. Ritchie 16

16. Toolbox StyleCop Detections Checks http://stylecop.codeplex.com/ Stephen D. Ritchie 17

17. Toolbox ReSharper http://www.jetbrains.com/resharper/ Detections Checks Gendarme http://www.mono-project.com/Gendarme Stephen D. Ritchie 18

18. The Master Craft Stephen D. Ritchie 19

19. Toolbox Simian Detections http://www.harukizaemon.com/simian/ Stephen D. Ritchie 20

20. The Master Craft Duplicates Finder .NET http://www.jetbrains.com/teamcity/ Clone Doctor Semantic Designs http://www.semdesigns.com/Products/Clone/ Stephen D. Ritchie 21

21. Dynamic Analysis Code Coverage Stephen D. Ritchie 22

22. Toolbox dotCover http://www.jetbrains.com/dotcover/ Stephen D. Ritchie 23

23. Toolbox Open Cover http://nuget.org/packages/OpenCover Stephen D. Ritchie 24

24. The Master Craft http://www.ncover.com/ Stephen D. Ritchie 25

25. Dynamic Analysis Sampling Instrumentation Stephen D. Ritchie 26

26. Toolbox Performance Stephen D. Ritchie 27

27. Toolbox Performance http://www.jetbrains.com/profiler/ Stephen D. Ritchie 28

28. The Master Craft Stephen D. Ritchie 29

29. The Master Craft Memory Queries Logging Security Stephen D. Ritchie 30

30. Static Analysis Source Visualizations Code Checks Assembly Metrics Detections Stephen D. Ritchie 31

31. The Master Craft Code Quality Visualizations http://www.ndepend.com/ Checks Metrics Detections http://www.lattix.com/ Stephen D. Ritchie 32

32. Hanselman’s Placemat http://bit.ly/LwKfwK Stephen D. Ritchie 33

33. Shameless Self-promotion http://amzn.to/v8TD8E Stephen D. Ritchie 34

34. Stephen’s Contact Info • Twitter: @ruthlesshelp • Email: stephen.ritchie@excella.com • Blog: http://ruthlesslyhelpful.net • LinkedIn: http://www.linkedin.com/in/sritchie Stephen D. Ritchie 35

Advanced Code Analysis In .NET

Recommended

Recommended

More Related Content

What's hot

What's hot (6)

Similar to Advanced Code Analysis In .NET

Similar to Advanced Code Analysis In .NET (10)

More from Stephen Ritchie

More from Stephen Ritchie (13)

Recently uploaded

Recently uploaded (20)

Advanced Code Analysis In .NET