You're reading from Implementing DevSecOps Practices

Product type Book

Published in Dec 2023

Publisher Packt

ISBN-13 9781803231495

Pages 258 pages

Edition 1st Edition

Languages

Concepts

Cybersecurity

Author (1):

Vandana Verma Sehgal

Table of Contents (25) Chapters

Preface

1. Part 1:DevSecOps – What and How?

2. Chapter 1: Introducing DevSecOps

3. Part 2: DevSecOps Principles and Processes

4. Chapter 2: DevSecOps Principles

5. Chapter 3: Understanding the Security Posture

6. Chapter 4: Understanding Observability

7. Chapter 5: Understanding Chaos Engineering

8. Part 3:Technology

9. Chapter 6: Continuous Integration and Continuous Deployment

10. Chapter 7: Threat Modeling

11. Chapter 8: Software Composition Analysis (SCA)

12. Chapter 9: Static Application Security Testing (SAST)

13. Chapter 10: Infrastructure-as-Code (IaC) Scanning

14. Chapter 11: Dynamic Application Security Testing (DAST)

15. Part 4: Tools

16. Chapter 12: Setting Up a DevSecOps Program with Open Source Tools

17. Part 5: Governance and an Effective Security Champions Program

18. Chapter 13: License Compliance, Code Coverage, and Baseline Policies

19. Chapter 14: Setting Up a Security Champions Program

20. Part 6: Case Studies and Conclusion

21. Chapter 15: Case Studies

22. Chapter 16: Conclusion

23. Index

Why subscribe?

24. Other Books You May Enjoy

Comparing DAST with other security testing approaches

There are several different approaches to application security testing, each with its strengths and weaknesses. In this section, we’ll compare DAST with other security testing approaches.

SAST

SAST is the process of analyzing the application’s source code to identify security vulnerabilities. Unlike DAST, which tests the application in a running state, SAST examines the application’s code and can detect vulnerabilities that may not be visible during runtime. However, SAST is limited by its inability to detect vulnerabilities that arise from user input or environmental factors.

IAST

IAST utilizes and combines the best features of SAST and DAST. IAST monitors the application during runtime and analyzes its behavior to detect vulnerabilities in real time. It also examines the application’s source code to detect vulnerabilities that may not be visible during runtime. However, IAST can be complex...