Which of the following application tests analyzes an application's source code for vulnerabilities, and is therefore only possible when the source code of an application is available?