Question: what is the difference between static and dynamic code analysis?
Answer: Static code analysis is done without executing any of the code; dynamic code analysis relies on studying how the code behaves during execution. ... Code analysis in itself produces secure code, but other issues, such as changes within the system build, need to also be considered to produce a secure system.