Identifying Vulnerabilities

​Lesson Objective: Today, we will analyze common methods to identify vulnerabilities.

Fill in the Blank

T/F: The three methods of application security are static analysis, dynamic analysis, and package monitoring.

Multiple Choice

Static Analysis

• Analyzing the source code or binary code of an application without executing it.

• Assessing the application's behavior during runtime.

Multiple Choice

Dynamic Analysis

• Analyzing the source code or binary code of an application without executing it.

• Assessing the application's behavior during runtime

Fill in the Blank

It is utilizing threat intelligence feeds to stay informed about the lastest cyber threats and proactively understanding the potential ____________(s).

Reorder

Identify the threat intelligence feeds by placing them in order: 1-Dark Web, 2-OSINT, 3-Proprietary, and 4-Information-Sharing

• Where cybercriminals may exchange informatin, tools, or compromised data

• Gathering information from publicaly available sources

• Leveraging intelligence from private or third-party sources

• Participating in information-sharing

1

2

3

4

• 1
• 2
• 3
• 4

Open Ended

What are some common methods to identify vulnerabilities?