Static application security testing: Difference between revisions

Revision as of 10:05, 15 October 2020

Revision as of 10:07, 15 October 2020

Line 102:

* [[Class (computer programming)|file or class-level]] - an extensible program-code-template for object creation.

* [[Application software|application level]] - a program or group of programs that interact.

The scope of the analysis determines its accuracy and capacity into detectingdetect vulnerabilities by using a wider contextual information.<ref>

{{Cite journal

|last1=Chess|first1=B.

Line 114:

|publisher=IEEE

|doi=10.1109/MSP.2004.55

}}</ref>.

Depending on the scope of the analysis, different techniques are used by SAST tools. At a function level, a common technique used is the construction of an [[Abstract syntax tree]] to control the flaw of data within the function <ref>

{{Cite journal

|last1=Yamaguchi|first1=Fabian