COMMON WEAKNESS ENUMERATIONIncomplete

CWE-511

Logic/Time Bomb

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Genişletilmiş açıklama

When the time bomb or logic bomb is detonated, it may perform a denial of service such as crashing the system, deleting critical data, or degrading system response time. This bomb might be placed within either a replicating or non-replicating Trojan horse.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Varies by ContextAlter Execution Logic

Etkilenen güvenlik alanları: Other, Integrity

Savunma

Nasıl önlenir ve çözülür?

Installation

Installation aşaması savunması

Detay
Always verify the integrity of the product that is being installed.

Doğrulama

Nasıl tespit edilir?

Automated Static Analysis

Conduct a code coverage analysis using live testing, then closely inspect any code that is not covered.