Which of the following software review processes increases the software security by removing the
common vulnerabilities, such as format string exploits, race conditions, memory leaks, and buffer
overflows?
A.
Management review
B.
Code review
C.
Peer review
D.
Software audit review
Explanation:
A code review is a systematic examination of computer source code, which
searches and resolves issues occurred in the initial development phase. It increases the software
security by removing common vulnerabilities, such as format string exploits, race conditions,
memory leaks, and buffer overflows. A code review is performed in the following forms: Pair
examination process in which author and one or more colleagues examine a work product, such
as document, code, etc., and evaluate technical content and quality. According to the Capability
Maturity Model, peer review offers a systematic engineering practice in order to detect and resolve
incorrect. Management review is a management study into a project’s status and allocation of
members of the software development organization, perform an independent examination of a
software product, software process, or a set of software processes for assessing compliance with
specifications, standards, contractual agreements, or other specifications.