Which of the following should be used to identify overflow vulnerabilities?

Question

Options

• AFuzzing
• BInput validation
• CPrivilege escalation
• DSecure coding standards

• A
  93% (27)
• B
  3% (1)
• D
  3% (1)

Explanation

Fuzzing (fuzz testing) is the technique of sending large volumes of malformed, random, or unexpected input to an application to observe crashes or unexpected behavior - the primary method for discovering overflow vulnerabilities such as buffer overflows and integer overflows. Input validation (B) prevents vulnerabilities but does not identify them; it is a mitigation, not a discovery tool. Privilege escalation (C) is an attack technique, not a testing methodology. Secure coding standards (D) are preventive guidelines, not a mechanism for finding existing flaws.

No community discussion yet for this question.