Interactive application security testing: Difference between revisions

Revision as of 18:13, 20 July 2022

Revision as of 07:02, 28 July 2022

Line 1:

'''Interactive application security testing''' (IAST) is a [[Security testing]] method that detects vulnerabilities by interaction with the program coupled with observation and sensors.<ref>https://owasp.org/www-project-devsecops-guideline/latest/02c-Interactive-Application-Security-Testing</ref><ref>https://www.softwaretestinghelp.com/what-is-iast/</ref>. It is distinct from [[Static application security testing]], which does not interact with the program, and [[Dynamic application security testing]], which considers the program as a [[Black box|black box]]. I may be considered a mix of both.<ref>https://www.g2.com/articles/sast-vs-dast</ref>.

==References==