Which of the following should be used to identify overflow vulnerabilities?

Fuzzing automates the process of supplying random, boundary, or malformed data to application inputs, which directly triggers buffer overflows and other memory-handling vulnerabilities that would not surface through normal usage. It is the industry-standard technique for discovering overflow conditions before attackers can exploit them.

Input validation is a mitigation control used to prevent bad data from entering a system, not a technique for discovering existing vulnerabilities.

Privilege escalation is an attack technique where an adversary gains elevated permissions, not a method for identifying overflow flaws.

Secure coding standards are preventive guidelines for writing safer code and do not identify vulnerabilities already present in an application.