COMMON WEAKNESS ENUMERATIONIncomplete

CWE-511

Logic/Time Bomb

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Extended description

When the time bomb or logic bomb is detonated, it may perform a denial of service such as crashing the system, deleting critical data, or degrading system response time. This bomb might be placed within either a replicating or non-replicating Trojan horse.

Root cause

How and when does the problem arise?

Lifecycle phase

Architecture and Design

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Varies by ContextAlter Execution Logic

Affected security scopes: Other, Integrity

Defence

How is it prevented and fixed?

Installation

Installation aşaması savunması

Detail
Always verify the integrity of the product that is being installed.

Verification

How is it detected?

Automated Static Analysis

Conduct a code coverage analysis using live testing, then closely inspect any code that is not covered.