Live briefing
Everything about Dynamic application security testing
Testing process to determine security weaknesses
Dynamic application security testing (DAST) represents a non-functional testing process to identify security weaknesses and vulnerabilities in an application. This testing process can be carried out either manually or by using automated tools. Manual assessment of an application involves human intervention to identify the security flaws which might slip from an automated tool. Usually business logic errors, race condition checks, and certain zero-day vulnerabilities can only be identified using manual assessments. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Dynamic application security testingA 5-minute orientation
- Skim a recent paper: Business-layer client-side racer: dynamic security testing of the web application against client-side race condition in the business layerInfluential work since 2022
- Pick up a classic book: C How to ProgramThe most-reprinted book on the subject
- Read the landmark paper: Semantic web Racer: Dynamic security testing of the web application against race condition in the business layerCited 5 times
- Go sideways: Application securityA closely related topic
- Go sideways: Static application security testingA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Semantic web Racer: Dynamic security testing of the web application against race condition in the business layer
A Comparative Analysis and Benchmarking of Dynamic Application Security Testing (DAST) Tools
Dynamic Application Security Testing for Payment Applications: A Comprehensive Guide
Pengembangan Keamanan Website Menggunakan Teknik Penetration Testing dan DAST (Dynamic Application Security Testing)
Use of dynamic application security testing for error detection in the program complex
Browser-Side Security Vulnerabilities in Healthcare Institutions Using Dynamic Application Security Testing (DAST): A Case Study of RS Mata Makassar
Analisis Kerentanan Menggunakan Dynamic Application Security Testing (DAST) Berdasarkan Pedoman OWASP Pada Situs Website Eprints Universitas Muhammadiyah Malang
🆕 Influential since 2022
Business-layer client-side racer: dynamic security testing of the web application against client-side race condition in the business layer
LLM-Guided Dynamic Security Testing of Android Applications: A Comparative Study Across Selected Models
ANALISIS PERBANDINGAN KEAMANAN APLIKASI WEB PADA PLATFORM E-COMMERCE STUDI KASUS: SHOPEE, TIKTOK SHOP DAN FACEBOOK MARKETPLACE MENGGUNAKAN DYNAMIC APPLICATION SECURITY TESTING (DAST)
📚 Books worth reading
C How to ProgramPaul J. Deitel, Harvey M. Deitel · 2007
JavaScriptDavid Flanagan · 1996- 📕Decision Making HandbookJerry Ramonyai · 2022
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
Eloquent JavascriptMarijn Haverbeke · 2009
Database system conceptsAbraham Silberschatz · 1997
Learning PHP, MySQL & JavaScriptRobin Nixon · 2009
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Application security Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve…
- Static application security testing Static application security testing (SAST) is used to secure software by reviewing its source code to identify security vulnerabilities. Although the process…
- Security testing Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and…
- Metasploit The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS…
- Service scan On computer networks, a service scan identifies the available network services by attempting to initiate many sessions to different applications with each…
- Fluid Attacks Fluid Attacks is an application security (AppSec) company founded in 2001 in Colombia. It specializes in security testing for software development companies…
- SAINT (software) SAINT (Security Administrator's Integrated Network Tool) is computer software used for scanning computer networks for security vulnerabilities, and exploiting…
- Code Dx Code Dx, Inc. was an American software technology company active from 2015 to 2021. The company's flagship product, Code Dx, is a vulnerability management…