ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ120

VerifiedPenetration Testing Essential Concepts

Jackson, a social media editor for Early Times, determined that exploitable zero-day vulnerabilities exist in many open-source protocols and common file formats used by software across some specific industries. To discover software vulnerabilities, he sent malformed or random input to the target software and observed the outcome. This technique helps uncover zero-day vulnerabilities and enables security teams to identify areas where software quality and security require improvement.

Identify the technique Jackson used to uncover zero-day vulnerabilities?

Explanation

Application fuzz testing supplies malformed, unexpected, or random inputs to software and monitors the resulting behavior. It helps reveal crashes and other flaws that can indicate previously unknown, including zero-day, vulnerabilities.

Community Discussion

No comments yet. Be the first to start the discussion!