Dynamic application security testing: Difference between revisions

Revision as of 12:16, 25 September 2007

Revision as of 14:46, 29 October 2007

Line 1:

{{Wikify|date=June 2007}}

== Definition ==

Web Application Security Scanners (or Web Application Vulnerability Scanners) are tools designed to automatically scan web applications for vulnerabilities.

A web application security scanner is software which communicates with a web application through the web front-end and identifies potential security weaknesses in the web application.

These tools work as black-box tester; meaning that, unlike Source Code Scanners, they don't access the source code and then, need to detect the vulnerabilities by performing attacks.