Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Static application security testing
open-in-new
<p>Static application security testing (SAST) is used to secure software by reviewing the source code of the software to identify sources of vulnerabilities. Although the process of <a href="/facts/Informal_methods_of_validation_and_verification/xz3ANB88">checking programs by reading their code </a> (modernly known as <a href="/facts/Static_program_analysis/b56nr6QM">static program analysis</a>) has existed as long as computers have existed, the technique spread to security in the late 90s and the first public discussion of <a href="/facts/SQL_injection/QD0cwbk5">SQL injection</a> in 1998 when Web applications integrated new technologies like <a href="/facts/JavaScript/XhhIIEsl">JavaScript</a> and <a href="/facts/Adobe_Flash_Player/IvnaoU7v">Flash</a>. </p><p>Unlike <a href="/facts/Dynamic_application_security_testing/V8vvzwdv">dynamic application security testing</a> (DAST) tools for <a href="/facts/Black-box_testing/j2velRR9">black-box testing</a> of application functionality, SAST tools focus on the code content of the application, <a href="/facts/White-box_testing/mVc9WRoa">white-box testing</a>. A SAST tool scans the source code of applications and its components to identify potential security vulnerabilities in their software and architecture. Static analysis tools can detect an estimated 50% of existing security vulnerabilities. </p><p>In the <a href="/facts/Software_development_life_cycle/cIDtuNPN">software development life cycle</a> (SDLC), SAST is performed early in the development process and at code level, and also when all pieces of code and components are put together in a consistent testing environment. SAST is also used for software quality assurance, even if the many resulting <a href="/facts/False_positives_and_false_negatives/jkC44hML">false-positive</a> impede its adoption by developers </p><p>SAST tools are integrated into the development process to help development teams as they are primarily focusing on developing and delivering software respecting requested specifications. SAST tools, like other security tools, focus on reducing the risk of downtime of applications or that private information stored in applications will not be compromised. </p><p>For the year of 2018, the Privacy Rights Clearinghouse database shows that more than 612 million records have been compromised by hacking. </p>