CSSLP · Question #337
According to the NIST SAMATE, dynamic analysis tools operate by generating runtime vulnerability scenario using some functions. Which of the following are functions that are used by the dynamic…
The correct answer is A. Implementation attack C. File corruption D. Network fault injection. According to NIST SAMATE, dynamic analysis tools identify vulnerabilities during software execution and use functions like implementation attack scenarios, file corruption testing, and network fault injection to generate runtime vulnerability scenarios.
Question
According to the NIST SAMATE, dynamic analysis tools operate by generating runtime vulnerability scenario using some functions. Which of the following are functions that are used by the dynamic analysis tools and are summarized in the NIST SAMATE? Each correct answer represents a complete solution. Choose all that apply.
Options
- AImplementation attack
- BSource code security
- CFile corruption
- DNetwork fault injection
How the community answered
(48 responses)- A88% (42)
- B13% (6)
Why each option
According to NIST SAMATE, dynamic analysis tools identify vulnerabilities during software execution and use functions like implementation attack scenarios, file corruption testing, and network fault injection to generate runtime vulnerability scenarios.
Dynamic analysis tools generate scenarios to test for vulnerabilities that arise during the runtime implementation of software.
Source code security is primarily addressed by static analysis tools, which examine software code without executing it, rather than dynamic analysis tools that operate at runtime.
Dynamic analysis tools can test how software behaves when confronted with corrupted or malformed input files during execution.
Dynamic analysis tools employ network fault injection to simulate network issues or malicious network inputs and assess software resilience at runtime.
Concept tested: Dynamic analysis tool functions
Source: https://csrc.nist.gov/publications/detail/nistir/8011/vol-1/final
Topics
Community Discussion
No community discussion yet for this question.