Hybrid Approach to Decision Support in Ensuring Software Code Security

In the context of the growing use of software, code security is of particular importance for preventing data leakages, financial losses and threats to national security. This paper proposes a hybrid approach to decision support for ensuring code security based on a combination of the results of static and dynamic code analysis. Static and dynamic analysis together allow identifying and eliminating vulnerabilities at various stages of the software development life cycle. The proposed approach is implemented as a decision support system for ensuring the software code security. During the experiment conducted on the implemented system, it was found that the use of the decision support module allows more efficient analysis of data on identified vulnerabilities. The system visualizes the results in graphical form, which facilitates the decision-making process for the user. In the presence of large data volumes and complex calculations, the human factor can lead to errors, which makes automation of the analysis process especially important. The results of the experiment confirm that the proposed approach not only improves the analysis quality, but also contributes to a more reliable software development process, given the constantly changing threat landscape.