From the course: Application Security Testing and Debugging

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

SAST fundamentals and tool selection

SAST fundamentals and tool selection

Welcome to this video of SAS Fundamentals and Tool Selection. Here's a compelling statistic. Fixing a security vulnerability during development costs 100 times less than fixing it in production. Yet, most organizations still rely on manual code reviews that can only examine a fraction of their code base. Today, we are going to master static application security testing, the technology that can analyze 100% of your code base in minutes, not months. In this video, we'll explore the white-box testing methodology of SAST and learn how to compare commercial versus open source static analysis tools. Specifically, we'll examine how white-box testing makes SAST uniquely powerful, the key differences between tool categories, practical implementation strategies, and real-world evaluation criteria that enterprise security teams actually use. By the end of this video, you will be able to apply white-box testing methodology using industry-standard SAS approaches that catch vulnerabilities other…

Contents