Vulnerability assessment, in the context of application security, is a technique to minimize application weaknesses that is becoming a crucial part of the mix to harden internet applications. Its strategic value is very high since vulnerability assessment and remediation is considered one of the best ways to harden systems and produce secure applications as a […]
RASP, also known as Runtime Application Self Protection, is one of the most modern technologies that protect running applications. Compared to the WAF perimetral approach, a RASP protects the applications from the inside. This means that a RASP has much better visibility of the dataflow and the consequences of each input that the application receives. […]
The National Institute of Standards and Technology (NIST) published a new edition of the Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-53. This post will provide an overview of the document and highlight the application security aspects of it, in particular those concerning the IAST and RASP requirements that are part […]
AST tools are one of the pillars of any Application Security practice. We believe that applications should be built secure from the very beginning, so we advocate for developers to take an active role in AppSec. As a result, we believe that all developers should have a basic knowledge of Application Security Testing (AST) tools […]
DAST, Dynamic Application Security Testing, is a web application security technology that finds security problems in the applications by seeing how the application responds to specially crafted requests that mimic attacks. DAST tools are also known as web scanners and the OWASP foundation refers to them as web application vulnerability scanners. From a methodology point […]
SAST is an application security technology that finds security problems in the code of applications, by looking at the application source code statically as opposed to running the application. SAST is one of the three different approaches that Application Security Testing (AST) follows, the other two being DAST and IAST. As a summary, SAST was […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
