Finding backdoor threats within applications

Finding backdoor threats within applications

What is the best approach to uncover hidden backdoor threats within applications?

    Requires Free Membership to View

    Login

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Backdoor threats are a method of bypassing authentication or other security controls in order to access a computer system or the data contained on that system. In fact, backdoors could ultimately lead to cyberfraud. I believe that static binary analysis is the best way to find malicious code such as backdoors, as well as root kits. That's because hackers can change binaries after they are compiled, and it is impossible to uncover this with source code tools.

This was first published in October 2007