From the course: Application Security in DevSecOps

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Continuous dynamic scanning

Continuous dynamic scanning

From the course: Application Security in DevSecOps

Start my 1-month free trial Buy for my team

Continuous dynamic scanning

“

- [Instructor] The next type of application security testing we will cover is dynamic analysis. This is the second most common security testing approach utilized by development teams, security professionals, and penetration testers alike. Dynamic testing is akin to an automated penetration test. It involves scanning a running web application to discover its pages, forms, links, and other attack surface areas. The tool then systematically attempts to identify vulnerabilities by interacting with the application. Unlike static analysis, which examines the source code, dynamic testing is largely language-agnostic. As long as the application has a web interface, the testing can be performed. From a security tester's perspective, dynamic testing is considered a black box approach, as the tester doesn't need to understand the inner workings of the application. One key consideration when integrating dynamic testing into a CI/CD pipeline is to run it asynchronously. Since these scans can be…

Contents