different methodologies for software vulnerability and malicious code analysis,
and employs each selectively:
u Primarily manual analysis of source code using static analysis tools
u Semi-automated analysis using tools