Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

A zero-day attack targets a software vulnerability that has not yet been publicly disclosed or patched, meaning antivirus signatures, IDS rules, and patch databases contain no existing defense for it. Because the vulnerability is unknown to trusted sources, traditional signature-based detection fails and the malware can operate without being identified until the vulnerability is discovered and remediated.

LDAP injection manipulates LDAP queries through unsanitized user input and is a well-documented, known attack type with existing detection methods.

XML injection exploits XML parsers with malicious content and is a known vulnerability class that trusted security tools already have signatures to detect.

Directory traversal exploits insufficient path validation to access files outside the web root and is a known, documented attack with established detection mechanisms.