17
What is FindBugs?
•
Static analysis tool to find defects in Java code
•
not a style checker
•
Can find hundreds of defects in each of large apps such
as Bea WebLogic, IBM Websphere, Sun's JDK
•
real defects, stuff that should be fixed
•
hundreds is conservative, probably thousands
•
Doesn’t focus on security
•
lower tolerance for false positives
3