Application Security

  1. Security Testing Methodologies
    1. Static Application Security Testing
      1. SAST Fundamentals
        1. Source Code Analysis
          1. Bytecode Analysis
            1. Binary Analysis
            2. SAST Tool Categories
              1. Commercial Tools
                1. Open Source Tools
                  1. IDE Integrations
                  2. SAST Implementation
                    1. CI/CD Integration
                      1. Build Pipeline Integration
                        1. Developer Workflow Integration
                        2. SAST Results Management
                          1. False Positive Handling
                            1. Result Prioritization
                              1. Remediation Tracking
                            2. Dynamic Application Security Testing
                              1. DAST Fundamentals
                                1. Black-Box Testing Approach
                                  1. Runtime Vulnerability Detection
                                    1. Attack Simulation
                                    2. DAST Tool Types
                                      1. Web Application Scanners
                                        1. API Security Scanners
                                          1. Mobile Application Scanners
                                          2. DAST Implementation
                                            1. Test Environment Setup
                                              1. Authentication Configuration
                                                1. Scan Scheduling
                                                2. DAST Coverage Optimization
                                                  1. Crawling Strategies
                                                    1. Input Discovery
                                                      1. Test Case Generation
                                                    2. Interactive Application Security Testing
                                                      1. IAST Technology
                                                        1. Runtime Instrumentation
                                                          1. Code Coverage Analysis
                                                            1. Real-Time Feedback
                                                            2. IAST Deployment
                                                              1. Agent Installation
                                                                1. Performance Considerations
                                                                  1. Environment Requirements
                                                                  2. IAST Benefits
                                                                    1. Reduced False Positives
                                                                      1. Contextual Analysis
                                                                        1. Continuous Testing
                                                                      2. Manual Security Testing
                                                                        1. Security Code Review
                                                                          1. Review Methodologies
                                                                            1. Focus Areas
                                                                              1. Review Tools
                                                                              2. Penetration Testing
                                                                                1. Test Planning
                                                                                  1. Reconnaissance
                                                                                    1. Vulnerability Exploitation
                                                                                      1. Post-Exploitation
                                                                                        1. Reporting
                                                                                        2. Security Architecture Review
                                                                                          1. Design Analysis
                                                                                            1. Threat Model Validation
                                                                                              1. Control Assessment
                                                                                            2. Specialized Testing Techniques
                                                                                              1. Fuzz Testing
                                                                                                1. Fuzzing Strategies
                                                                                                  1. Input Generation
                                                                                                    1. Crash Analysis
                                                                                                    2. API Security Testing
                                                                                                      1. REST API Testing
                                                                                                        1. GraphQL Testing
                                                                                                          1. SOAP API Testing
                                                                                                          2. Mobile Application Testing
                                                                                                            1. Static Analysis for Mobile
                                                                                                              1. Dynamic Analysis for Mobile
                                                                                                                1. Runtime Application Testing

                                                                                                            Previous

                                                                                                            8. Secrets Management

                                                                                                            Go to top

                                                                                                            Next

                                                                                                            10. Common Vulnerability Categories