Static analysis: This involves reviewing the code of an application without executing it, aiming to discover potential vulnerabilities, bugs, or breaches of coding standards. This method focuses on the source code, byte code, or binary code, using a set of predefined rules or patterns to identify possible issues. It’s particularly useful in identifying non-obvious errors, and unlike dynamic analysis, it can be conducted early in the development process.
Categories: CC D5: Security Operations | CCSP D4: Cloud Application Security | CISM D3: Information Security Program | CISSP D6: Security Assessment and Testing | Security+ D5: Security Program Management and Oversight | SSCP D7: Systems and Application Security
« Back to Glossary Index