Describe the four categories of observing error messages: typical conditions with no error, typical conditions with typical error, injection conditions with no error, and inject conditions with injection-caused error.

List 3 different methods to identify vulnerabilities within source code.

Code inspection is a common practice in industry whereby a committee of senior programmers review and offer advice. What specific items should the committee members be looking for when considering vulnerabilities?