CauSec: Unboxing the Causal Drivers of Static Vulnerability Analysis Performance

Static Application Security Testing SAST tools are widely used in both industry and academia. Such tools often make design choices that sacrifice detection to achieve higher performance, i.e., increased precision, decreased runtime, or increased scalability. These design choices rely on certain...