According to SOAR, the following detection techniques may be useful:

``` Cost effective for partial coverage: ```

Inter-application Flow Analysis

N/A

According to SOAR, the following detection techniques may be useful:

``` Cost effective for partial coverage: ```

Binary / Bytecode disassembler - then use manual analysis for vulnerabilities & anomalies

N/A

According to SOAR, the following detection techniques may be useful:

``` Cost effective for partial coverage: ```

Host-based Vulnerability Scanners - Examine configuration for flaws, verifying that audit mechanisms work, ensure host configuration meets certain predefined criteria Web Application Scanner Web Services Scanner Database Scanners

N/A

According to SOAR, the following detection techniques may be useful:

``` Highly cost effective: ```

Host Application Interface Scanner ``` Cost effective for partial coverage: ```

Fuzz Tester Framework-based Fuzzer Automated Monitored Execution Forced Path Execution

N/A

According to SOAR, the following detection techniques may be useful:

``` Highly cost effective: ```

Manual Source Code Review (not inspections) ``` Cost effective for partial coverage: ```

Focused Manual Spotcheck - Focused manual analysis of source

N/A

According to SOAR, the following detection techniques may be useful:

``` Cost effective for partial coverage: ```

Context-configured Source Code Weakness Analyzer

N/A

According to SOAR, the following detection techniques may be useful:

``` Cost effective for partial coverage: ```

Configuration Checker

N/A

According to SOAR, the following detection techniques may be useful:

``` Highly cost effective: ```

Formal Methods / Correct-By-Construction ``` Cost effective for partial coverage: ```

Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.)

N/A