2.4 KB · ⇊ 2 parts · ⤓ Micron 2.4 KB · ⤓ HTML 11.0 KB

top

Interactive application security testing (abbreviated as IAST)cite-ref-1[1] is a security testing method that detects software vulnerabilities by interaction with the program coupled with observation and sensors.cite-ref-2[2]cite-ref-3[3] The tool was launched by several application security companies.cite-ref-janca2020-4-0[4] It is distinct from static application security testing, which does not interact with the program, and dynamic application security testing, which considers the program as a black box. It may be considered a mix of both.cite-ref-5[5]

cite-note-11. ↑ citerefmike-chapplejames-michael-stewartdarril-gibson2021Mike Chapple; James Michael Stewart; Darril Gibson (2021). (ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide. John Wiley & Sons. ISBN 978-1-119-78624-5.

cite-note-22. ↑ "OWASP DevSecOps Guideline - v-0.2 | OWASP Foundation". Owasp.org.

cite-note-33. ↑ "What is IAST: Interactive Application Security Testing". www.softwaretestinghelp.com.

cite-note-janca2020-44. ↑ citereftanya-janca2020Tanya Janca (2020). Alice and Bob Learn Application Security. John Wiley & Sons. pp. 140–. ISBN 978-1-119-68735-1.

cite-note-55. ↑ citerefaaron-walker2019Aaron Walker (August 14, 2019). "SAST vs. DAST: Application Security Testing Explained". www.g2.com. Archived from the original on 2022-07-20.