Tools / Application Security Interview Questions
What are SAST, DAST and SCA?
SAST (Static Application Security Testing) is the automated analysis of written code (compiled or uncompiled) for security vulnerabilities.
DAST (Dynamic Application Security Testing) is interaction with your running application with the purpose of finding and managing vulnerabilities it may have.
Software Composition Analysis (SCA) is the verification of the third-party libraries, frameworks, and components used within your application; all of the code that you and your team did not write is considered by SCA tools.
More Related questions...
