A Company That Developers Embedded Software for the Automobile Industry

Multiple Choice

A company that developers embedded software for the automobile industry has hired a penetration-testing team to evaluate the security of its products prior to delivery. The penetration-testing team has stated its intent to subcontract to a reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits. The software company has requested additional background investigations on the reverse-engineering team prior to approval of the subcontract. Which of the following concerns would BEST support the software company's request?

A) The reverse-engineering team may have a history of selling exploits to third parties.
B) The reverse-engineering team may use closed-source or other non-public information feeds for its analysis.
C) The reverse-engineering team may not instill safety protocols sufficient for the automobile industry.
D) The reverse-engineering team will be given access to source code for analysis.