Vulnerability Management

Question 1

Often used early in the development process:

Static Code or Dynamic Code?

Answer 1

Static Code

1. Involves examining the code without executing it.
2. Examines code structure, syntax, and semantics to detect issues like syntax errors, coding standards violations, security vulnerabilities, and bugs.

Question 2

Typically used later in the software development lifecycle

Static Code or Dynamic Code ?

Answer 2

Dynamic Code

1. Analyses runtime properties like memory usage, performance, and error handling to identify issues such as memory leaks, performance bottlenecks, and runtime errors
2. Involves executing the code and analysing its behaviour at runtime