code analysis

{
  "id": "MLC-T-CYB-000728",
  "term": "code analysis",
  "field": "Cybersecurity",
  "definition": "The act of reverse-engineering a program to understand the code that implements the software behavior. For example, when looking at compiled programs, the process involves using a disassembler, a debugger, and perhaps a decompiler to examine the program's low-level assembly or byte-code instructions. A disassembler converts the instructions from their binary form into the human-readable assembly form. A decompiler attempts to recreate the original source code of the program. A debugger allows the analyst to step through the code, interacting with it, and observing the effects of its instructions to understand its purpose.",
  "references": [
    "CNSSI 4009-2022 from CNSSI 1011 (adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/code-analysis/"
}