A software engineer is downloading a third-party application from a public repository and wants to ensure the application has not been maliciously altered. Which of the following techniques should the engineer use?

Dynamic analysis involves executing the application in a controlled environment to observe its behavior during runtime. While this can help identify malicious actions at runtime, it does not verify the integrity of the application prior to execution. Therefore, it cannot ensure that the application has not been altered before being downloaded.

Encryption in transit protects data as it travels over a network, preventing eavesdropping during transmission. However, it does not address whether the application itself has been tampered with after it was initially created. Thus, while encryption is important for confidentiality, it does not ensure the application's integrity post-download.

Static analysis involves examining the source code or binaries without executing them. While it can help identify vulnerabilities or malicious code patterns, it does not provide a definitive assurance that the application has not been altered by unauthorized parties. Therefore, it is not a reliable method for confirming the integrity of the application.