From the course: Building an Application Security Program

Unlock the full course today

Join today to access over 25,200 courses taught by industry experts.

Static application security testing (SAST)

Static application security testing (SAST)

From the course: Building an Application Security Program

Start my 1-month free trial Buy for my team

Static application security testing (SAST)

“

- [Instructor] Now let's talk about security testing and the different types of security tests that we can run. I want to start by first talking about static application security testing. A good definition of SAST by Forrester is tools that test and evaluate an applications proprietary code by examining the code or binary without executing the application. SAST is one of the most mature areas of security testing. The tools have been around for quite some time. They have matured and become more accurate over time, but static analysis testing of code has been around for years. It's mainly a rules-based type of test where it checks the code, follows the code logic, and looks for security vulnerabilities. Obviously, the tools have to keep up to date with the latest vulnerabilities in the latest languages, but the category has been around for years. SAST works really well when developers are directly involved. Since developers…

Contents