Defining Static Source Code Analysis
Static source code analysis refers to the analysis of software that is performed without executing the application under test. This contrasts with run time or dynamic analysis where the analysis is performed on a executing application. In a static source code analysis the analysis is performed on the source code or object code used to build the application.
Static and run time analyses each have their respective merits. A run time analysis will allow you to isolate behaviour that can only be exhibited at runtime, for example where an application takes some form of real time feed or interrupt. However, to perform a run time analysis will require the execution of the application and invariably the creation and maintenance of a test data set to cover the use cases required.
