From the course: Building an Application Security Program

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Interactive application security testing (IAST)

Interactive application security testing (IAST)

From the course: Building an Application Security Program

Start my 1-month free trial Buy for my team

Interactive application security testing (IAST)

“

- [Instructor] Now let's talk about one of the newer types of security testing, interactive application security testing. Once again, OWASP has one of my favorite definitions of IAST, an application security testing method that tests the application while the app is run by an automated test, human tester, or any activity interacting with the application functionality. The keyword here is interacting, which is where it gets its name. IAST scans the code for vulnerabilities while the website is running, not in the code, and not hacking like DAST. While the application is running through either an automated test or manual test, the IAST tool is scanning. IAST hooks into the runtime of the application. It automatically does security checking of the code while the code is being interpreted at runtime. It's similar to application performance monitoring tools. If you're familiar with APM tools that have been out there for…

Contents