Application Security Testing Classroom from Code Dx

Vulnerability Management: Is 100% code and vulnerability coverage realistic?

Vulnerability Management: Is 100% code and vulnerability coverage realistic?

In the world of application security testing, the terms “code coverage” and “vulnerability coverage” are frequently used. But what do they really mean? Essentially, code coverage is the amount of the code that is scanned to identify potential vulnerabilities in a software application. Vulnerability coverage refers to the number of defects or system misconfigurations in the software code that could pose potential threats.

Each SAST tool only discovers about 14% of the vulnerabilities in your code

Each SAST tool only discovers about 14% of the vulnerabilities in your code

An essential element of the application development process is scanning the software to find potential vulnerabilities. Static Application Security Testing tools are notorious for returning lots of results (often thousands, even for relatively small applications), which can overwhelm a developer. But no matter how they feel about the results, software developers must understand that by running only one application security testing tool—even the best on the market—they are missing most of the weaknesses in their code.

Hybrid Application Security Testing (HAST)

Hybrid Application Security Testing (HAST)

Both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) share a common goal—finding security vulnerabilities in an application. Both are an important part of a comprehensive application security process, but the perspectives and...

AST Glossary

AST Glossary

Active Scan – is when a vulnerability scanner actively sends requests to a running application with the intent of exposing and identifying vulnerabilities. Application Security Testing (AST) – the process of identifying holes in an...

© Code Dx, Inc. (631) 759-3993 | Privacy Policy | Contact Us | Site map