Static application security testing: Difference between revisions

Content deleted Content added
Improve wording slightly.
top: Fixed typo
Tags: canned edit summary Mobile edit Mobile app edit Android app edit
Line 2:
 
Unlike [[dynamic application security testing]] (DAST) tools for [[black-box testing]] of application functionality, SAST tools focus on the code content of the application, [[white-box testing]].
AnA SAST tool scans the source code of applications and its components to identify potential security vulnerabilities in their software and architecture.
Static analysis tools can detect an estimated 50% of existing security vulnerabilities.<ref>
{{Cite journal