Exam CISSP topic 1 question 87 discussion

Software forensics is the science of analyzing software source code or binary code to determine whether intellectual property infringement or theft occurred. It is the centerpiece of lawsuits, trials, and settlements when companies are in dispute over issues involving software patents, copyrights, and trade secrets. Software forensics tools can compare code to determine correlation, a measure that can be used to guide a software forensics expert. Source -Wikipedia

Software forensics: the importance is attribution : review the code to identify the developer when malicious insiders are suspected.

The purpose of software forensics (also known as software reverse engineering) is best described as: C. To determine the author and behavior of the code. Software forensics involves the analysis of software code to understand its structure, functionality, and behavior. It aims to identify the origin of the code, determine its purpose, and gain insights into its functionality. By examining the code, forensic analysts can gather information about the software's behavior, identify potential vulnerabilities or malicious intent, and assess its overall security. While software forensics may involve analyzing possible malicious intent of malware (option A), performing cyclic redundancy check (CRC) verification to detect changed applications (option B), and reviewing program code to determine the existence of backdoors (option D), its primary purpose is to understand and investigate the authorship and behavior of the code. the story never end, too long and too complex

D Forensic analysts may also be called on to conduct forensic reviews of applications or the activity that takes place within a running application. In some cases, when malicious insiders are suspected, the forensic analyst may be asked to conduct a review of software code, looking for back doors, logic bombs, or other security vulnerabilities. In other cases, forensic analysis may be asked to review and interpret the log files from application or database servers, seeking other signs of malicious activity, such as SQL injection attacks, privilege escalations, or other application attacks

I choose C. What Is Software Forensics? Software forensics is a branch of science that investigates computer software text codes and binary codes in cases involving patent infringement or theft. Software forensics can be used to support evidence for legal disputes over intellectual property, patents, and trademarks.

C is the correct answer. Reading the question clearly suggests the forensic analysis of attacker code

C. https://en.wikipedia.org/wiki/Software_forensics

Software Science aimed at authorship analysis of computer source code for legal purposes. It involves the areas of author identification, discrimination, and characterization. https://resources.infosecinstitute.com/topic/computer-forensics-overview-software-forensics/

A seems right

D is correct

Yep "C" - Let's make sure they didn't copy our code