Dynamic application security testing: Difference between revisions

Revision as of 15:01, 29 October 2007

Revision as of 00:36, 30 October 2007

Line 4:

:A web [[application security]] scanner is software which communicates with a web application through the web front-end and identifies potential security weaknesses in the web application.

These tools work as [[black-box]] tester; meaning that, unlike Sourcesource Codecode Scannersscanners, they don't access the source code and then, need to detect the [[Vulnerability_%28computing%29|vulnerabilities]] by performing attacks.

=== Vulnerabilities ===