 |
Thirdly, on the build and testing stage, integration, verification, transition, and validation processes will be applied. The activities have IAST, SAST, SCA, Dynamic Application (binary) Security Testing (DAST), Application (binary) Vulnerability Scan (AVS), IoT Vulnerability Scan, and Penetration Test. DAST is a black box testing without knowledge of the application¡¯s internal interactions or designs at the system level, and with no access or visibility into the source program. An application¡¯s responses to simulations to determine whether the application is vulnerable and could be susceptible to a real malicious attack. A penetration test is an attempt to evaluate the security of an IT infrastructure by trying to exploit vulnerabilities. |
IEEE/ICACT20220036 Slide.13
[Big Slide]
[YouTube]