QuestionQ27

Security Engineering

A security researcher informs a company that one of its solutions is susceptible to a buffer overflow, resulting in malicious coding execution. Which of the following is the best way to prevent this vulnerability in future versions?

  • A Testing for CSRF vulnerabilities before the application goes to production
  • B Using SAST tools to find vulnerabilities as part of the pipeline
  • C Implementing canary protection in an earlier life-cycle stage
  • D Implementing pair programming to improve development capabilities
Explanation

Static application security testing (SAST) analyzes source code and can identify buffer-overflow and other memory-safety defects before release when integrated into the development pipeline. This enables remediation of the insecure code in future versions.

Community Discussion

No comments yet. Be the first to start the discussion!