Security testing: Difference between revisions

Revision as of 09:49, 5 July 2022

Revision as of 09:36, 20 July 2022

Line 52:

== Tools ==

* CSA - [[Container (virtualization)|Container]] and [[IT infrastructure|Infrastructure]] Security Analysis<ref>https://github.com/OWASP/Container-Security-Verification-Standard</ref><ref>https://cheatsheetseries.owasp.org/cheatsheets/Infrastructure_as_Code_Security_Cheat_Sheet.html</ref>

* CSA - Container and Infrastructure Security Analysis

* [[DynamicStatic application security testing|DAST]]SAST - [[DynamicStatic Application Security Testing]]

* [[Dynamic application security testing|DAST - Dynamic Application Security Testing]]

* [[Data loss prevention software|DLP]] - [[Data Loss Prevention]]

* IAST - Interactive Application Security Testing<ref>https://owasp.org/www-project-devsecops-guideline/latest/02c-Interactive-Application-Security-Testing</ref>

* [[Data loss prevention software|DLP]] - [[Data Loss Prevention]]

* [[Intrusion detection system|IDS]]/, IPS - [[Intrusion Detection]] and/orSystem, Intrusion Prevention System]]

* OSS Scanning - Open Source Software Scanning (see [[Open-source software security]])

* RASP - Runtime Application Self Protection

* SAST[[Runtime application self-protection|RASP Static- Runtime Application Security TestingSelf-Protection]]

* SCA - Software Composition Analysis<ref>https://owasp.org/www-community/Component_Analysis</ref>

* [[Web application firewall|WAF - Web Application Firewall]]

== See also ==