Loading article...
Loading article...
Stream/Area:
-
Subject:
-
Paper ID:
IJSREM63210
Volume:
10 |
5 |
May 2026
Pages:
1-4
Publication Frequency:
Monthly (12 issues per year)
License:International Journal of Scientific Research in Engineering and Management follows the Creative Commons Attribution 4.0 (CC BY 4.0) License, allowing free use and distribution with proper attribution.
Department of AI
Faculty of Engineering and Technology, JAIN (Deemed-to-be University)
Department of CSE
Faculty of Engineering and Technology, JAIN (Deemed-to-be University)
Software security has become a critical concern due to the rapid growth of complex and connected systems. Vulnerabilities in software can lead to severe consequences, including data breaches, financial loss, and system concession. Static and dynamic analysis ways are extensively used to identify security vulnerabilities during different phases of the software development lifecycle. This survey provides a comprehensive review of static and dynamic analysis ways, including their methodologies, tools, advantages, limitations, and operations in software security. Static analysis focuses on analyzing source code without execution, enabling early discovery of vulnerabilities, while dynamic analysis evaluates software behavior during runtime to identify real-world security issues. The paper also explores hybrid approaches that combine both ways to improve discovery accuracy and content. The survey concludes that integrating static and dynamic analysis within secure development practices is essential for building robust and secure software systems.
KEYWORDS
This survey presented a detailed overview of static and dynamic analysis techniques for software security. Static analysis helps identify vulnerabilities early by examining code without execution, while dynamic analysis detects runtime issues by testing the application during execution. Each technique has advantages and limitations, and neither can fully replace the other. A hybrid approach provides better coverage, improved accuracy, and stronger vulnerability prioritization. As software systems become more complex, integrating static and dynamic analysis into DevSecOps pipelines will become increasingly important. Future improvements in AI-based testing, automated penetration testing, and cloud security analysis will further strengthen secure software development practices. Overall, secure software development requires a combination of automated tools, human expertise, continuous testing, and developer awareness. By using static and dynamic analysis effectively, organizations can reduce security risks and build more trustworthy software systems.
1) M. Pistoia et al., 'A Survey of Static Analysis Styles,' IBM Systems Journal, 2007. 2) A. Damodaran et al., 'Static vs Dynamic Malware Analysis,' IEEE, 2022. 3) M. Shaon et al., 'Software Vulnerability Discovery,' Electronics, 2025. 4) A. Kaur, 'Static Code Analysis Tools Study,' ScienceDirect, 2020. 5) T. Minh Thanh, 'Static and Dynamic Analysis Overview,' 2024. 6) StackHawk, 'Dynamic Analysis Companion,' 2025. 7) VFunction, 'Static vs Dynamic Law Analysis,' 2025. 8) Kiuwan, 'Static vs Dynamic Testing Companion.' 9) IEEE, 'Software Security Testing Standards.' 10) G. Myers, 'Software Testing,' Wiley, 2011.
Publication Date
5/14/2026
Peer Review Type
Double-Blind Peer Review
Review Rounds: 2
Documents
Article Views
0
Total views since publication
PDF Downloads
2
Total downloads since publication
Geographic Reach
5
Digital Preservation: This article is permanently archived on Zenodo and complies with all data preservation standards across major indexing platforms.
Plagiarism Screening
This manuscript has been checked for plagiarism using TurnitinPlagiarismChecker software.
Conflict of Interest
The authors declare no conflict of interest related to this research work.
Funding Information
No funding information available for this research.
Related research in the same subject area
Loading similar articles...