Static application security testing: Difference between revisions

Revision as of 09:32, 15 October 2020

Revision as of 09:36, 15 October 2020

Line 19:

}}</ref>.

In [[Software development process|SDLC]], SAST is performed early in the development process and at code level, and also when all pieces of code and components are put together in a consistent testing environment. SAST is based on [[Static analysis|static analysis]] which is also used tofor ensuresoftware quality of softwareassurance.<ref>

{{Cite journal

|last1=Ayewah|first1=N.

Line 35:

|publisher=IEEE

|doi=10.1109/MS.2008.130

}} </ref> even if the largemany rate ofresulting [[False_positives_and_false_negatives#False_positive_error|false-positive]] is slowing downimpede theits adoption by developers<ref>

{{Cite journal

|last1=Johnson|first1=Brittany

Line 47:

|isbn=978-1-4673-3076-3

}}

</ref>.

SAST tools are integrated into the development process to help development teams as they are primarily focusing on developing and delivering software respecting requested specifications<ref name="auto">