Question

Discuss the advantages and disadvantages of dynamic analysis technique over static analysis techniques.

Answer 1

Advantages of dynamic analysis technique:-

• Only requires a running system to perform a test.
• No requirement to have access to source code or binary code
• No need to understand how to write software or execute builds
• Tests a specific, operational deployment

Disadvantages of dynamic analysis technique:-

• Limited scope of what can be found

  – Application must be footprinted to find the test area

– That can cause areas to be missed

– You can only test what you have found

• No access to actual instructions being executed

- Tool is exercising the application

- Pattern matching on requests and responses

Advantages of static analysis technique:-

• Have access to the actual instructions the software will be executing

  – No need to guess or interpret behavior

  – Full access to all of the software’s possible behaviors

Disadvantages of static analysis technique:-

• Require access to source code or at least binary code
• Typically require proficiency running software builds
• Will not find issues related to operational deployment environments