Static application security testing: Difference between revisions

Revision as of 09:46, 15 October 2020

Revision as of 09:49, 15 October 2020

Line 260:

}}</ref>

Scanning a large amount ofmany linelines of code with SAST tools may result in hundreds or thousands of vulnerability warnings for a single application. It generates a large number ofmany false-positives, increasing the investigation time and reducing the trust in such tools. This is particularly the case when the context of the vulnerability cannot be caught by the tool<ref>

{{Cite journal

|last1=Johnson|first1=Brittany