The National Institute of Standards and Technology (NIST) published a new edition of the Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-53. This post will provide an overview of the document and highlight the application security aspects of it, in particular those concerning the IAST and RASP requirements that are part […]
AST tools are one of the pillars of any Application Security practice. We believe that applications should be built secure from the very beginning, so we advocate for developers to take an active role in AppSec. As a result, we believe that all developers should have a basic knowledge of Application Security Testing (AST) tools […]
DAST, Dynamic Application Security Testing, is a web application security technology that finds security problems in the applications by seeing how the application responds to specially crafted requests that mimic attacks. DAST tools are also known as web scanners and the OWASP foundation refers to them as web application vulnerability scanners. From a methodology point […]
SAST is an application security technology that finds security problems in the code of applications, by looking at the application source code statically as opposed to running the application. SAST is one of the three different approaches that Application Security Testing (AST) follows, the other two being DAST and IAST. As a summary, SAST was […]
SSRF is a type of web application vulnerability and the associated family of attacks that force a target server to execute requests against other resources that the target server has access to, including read and write operations to local and internal assets. The SSRF acronym stands for “Server-Side Request Forgery,” as the attacker forces the […]
Interactive Application Security Testing (IAST) application security tools complement and replace legacy Automatic Security Testing (AST) tools such as SASTs and DASTs. We believe that IAST tools are one of the best investments developers can make to improve the security of their applications. You can also browse our IAST Detection tool section in the Hdiv […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
