You're reading from Implementing DevSecOps Practices

Product type Book

Published in Dec 2023

Publisher Packt

ISBN-13 9781803231495

Pages 258 pages

Edition 1st Edition

Languages

Concepts

Cybersecurity

Author (1):

Vandana Verma Sehgal

Table of Contents (25) Chapters

Preface

1. Part 1:DevSecOps – What and How?

2. Chapter 1: Introducing DevSecOps

3. Part 2: DevSecOps Principles and Processes

4. Chapter 2: DevSecOps Principles

5. Chapter 3: Understanding the Security Posture

6. Chapter 4: Understanding Observability

7. Chapter 5: Understanding Chaos Engineering

8. Part 3:Technology

9. Chapter 6: Continuous Integration and Continuous Deployment

10. Chapter 7: Threat Modeling

11. Chapter 8: Software Composition Analysis (SCA)

12. Chapter 9: Static Application Security Testing (SAST)

13. Chapter 10: Infrastructure-as-Code (IaC) Scanning

14. Chapter 11: Dynamic Application Security Testing (DAST)

15. Part 4: Tools

16. Chapter 12: Setting Up a DevSecOps Program with Open Source Tools

17. Part 5: Governance and an Effective Security Champions Program

18. Chapter 13: License Compliance, Code Coverage, and Baseline Policies

19. Chapter 14: Setting Up a Security Champions Program

20. Part 6: Case Studies and Conclusion

21. Chapter 15: Case Studies

22. Chapter 16: Conclusion

23. Index

Why subscribe?

24. Other Books You May Enjoy

Dynamic Application Security Testing (DAST)

Dynamic application security testing (DAST) is a type of security testing that assesses the security of web applications by analyzing them while they are running. This approach evaluates the application from the outside in, simulating real-world attacks and identifying vulnerabilities that can be exploited by hackers.

DAST works by sending malicious input to an application and observing how the application responds. This can include sending invalid data to input fields, attempting to bypass authentication mechanisms, and trying to access sensitive data without proper authorization. The tool then analyzes the responses to identify any vulnerabilities or weaknesses in the application’s security.

DAST can be used to test a wide range of web applications, including those that are built using programming languages such as Java, .NET, and PHP. The tool can also be used to test applications hosted in various environments, including...