ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

The routine performs its action only when two very specific conditions are met (a particular calendar date and a specific user account). Malicious code that stays dormant until an internally defined trigger condition occurs is called a logic bomb. A backdoor provides unauthorized access without necessarily waiting for a trigger. A Trojan horse masquerades as benign software to perform hidden malicious actions regardless of special conditions. A time-of-check/time-of-use flaw is a race-condition vulnerability, not deliberately placed malware.