Which of the following tools or techniques is used by software developers to maintain code, but also used by hackers to maintain control of a compromised system?

A backdoor is a covert method of bypassing normal authentication or security mechanisms to gain access to a system. Software developers may legitimately implement a backdoor during the development phase to facilitate easier testing, debugging, or administrative access. Conversely, attackers install backdoors on compromised systems to create a persistent, hidden entry point. This allows them to maintain remote control and access the system in the future, even if the original vulnerability that granted them initial entry is discovered and patched. This dual-use nature, serving both legitimate maintenance and malicious control, makes it the correct answer.

A. Disassembler: A disassembler is a reverse-engineering tool used to analyze compiled code. It is not a mechanism for maintaining persistent control over a system.
C. Debugger: A debugger is a tool used by both developers and attackers to analyze running programs and find flaws, not to maintain long-term, persistent access.
D. Stack pointer: A stack pointer is a fundamental CPU register used in program execution. It is not a tool or technique implemented for maintenance or control.

1. Stallings, W., & Brown, L. (2018). Computer Security: Principles and Practice (4th ed.). Pearson. In Chapter 6.2, "Types of Malicious Software (Malware)," a backdoor (or trap door) is described as a "secret entry point into a program" that can be used by programmers for testing but is also a common component of malware installed by an intruder.

2. Saltzer, J. H., & Kaashoek, M. F. (2009). Principles of Computer System Design: An Introduction. Morgan Kaufmann. Chapter 9, "Security and Protection," Section 9.6.3, "Subtle Security Attacks," discusses trap doors (backdoors) as security flaws that can be intentionally planted by a developer for debugging or by an attacker for later exploitation.

3. National Institute of Standards and Technology (NIST). (n.d.). Glossary: Back Door. Computer Security Resource Center. The official definition is "An undocumented way of gaining access to a computer system. A back door is a potential security risk." This definition encompasses both intentional developer-created access points and malicious ones.