Before revision: This activity does not utilize any of the earlier approaches (Vulnerability Assessment, Security Assessment, Penetration Test, Security Audit) Tools CSA - Container and Infrastructure Security Analysis DAST - Dynamic Application Security Testing DLP - Data Loss Prevention IAST - Interactive Application Security Testing IDS/ IPS - Intrusion Detection and/or Intrusion Prevention OSS - Open Source Software Scanning RASP - Runtime Application Self Protection SAST - Static Application Security Testing SCA - Software Composition Analysis WAF - Web Application Firewal
After revision: This activity does not utilize any of the earlier approaches (Vulnerability Assessment, Security Assessment, Penetration Test, Security Audit) Tools CSA - Container and Infrastructure Security URL SAST - Static Application Security Testing DAST - Dynamic Application Security Testing DLP - Data Loss Prevention IAST - Interactive Application Security URL DLP - Data Loss Prevention IDS, IPS - Intrusion Detection System, Intrusion Prevention System OSS Scanning - Open Source Software Scanning RASP - Runtime Application Self-Protection SCA - Software Composition URL(see Open-source software security) WAF - Web Application Firewal