Application Security Testing
What is Application Security Testing?
The process of evaluating software applications for security vulnerabilities using techniques such as static analysis, dynamic analysis, and interactive testing.
Terms that appear alongside application security testing
Each of these is named in at least one of the same controls as application security testing. The number is how many controls name both.
- security testing 14 shared controls
- application security 14 shared controls
- dynamic application security testing 5 shared controls
- owasp 4 shared controls
- secure coding 4 shared controls
- interactive application security testing 4 shared controls
- vulnerability 3 shared controls
- software composition analysis 3 shared controls
Frameworks that govern application security testing
What the standards actually require on application security testing
Requirements naming application security testing across 6 standards, quoted from the control text.
Integrate dynamic application security testing into the delivery workflow as a gating control, so results can prevent vulnerable builds reaching production.
ASBv3-DS-5 · Integrate dynamic application security testing into DevOps pipeline →To minimise bugs and vulnerabilities the FI should adopt standards on secure coding, source code review and application security testing, covering secure programming, input validation, output encoding, access controls, authentication, cryptographic practices a...
monetary-authority-of-singapore-technology-risk-management-guidelines::6.1 · 6.1 Secure Coding, Source Code Review and Application Security Testing →OSPS-VM-06 Publish and Enforce an Application Security Testing Policy (maturity level 3). Requirement: The project documentation MUST include a policy that defines a threshold for remediation of SAST findings.
openssf-open-source-project-security-baseline-osps-baseline::OSPS-VM-06.01 · OSPS-VM-06.01 Publish and Enforce an Application Security Testing Policy →Integrate routine static, dynamic, and interactive application security testing throughout the development and deployment lifecycle.
ZTMM-APP-TEST · Applications Pillar: Application Security Testing →Test applications for security before release against defined acceptance criteria covering new systems, upgrades and versions, automating the testing where the delivery pipeline allows.
CCM-AIS-05 · Automated Application Security Testing →A testing strategy is put in place that sets acceptance criteria for new systems, upgrades and new versions, gives assurance of application security and keeps the organisation compliant while still meeting its delivery goals.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::AIS-05 · Application Security Testing →Questions people ask about application security testing
What is Application Security Testing?
Why is Application Security Testing important for compliance?
Which compliance frameworks address Application Security Testing?
Where can I learn more about Application Security Testing?
See how Application Security Testing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.