## 3 Method Proposal to Analyze AST n-Tools Combinations
### Analysis and Discussion
\begin{table}
\begin{tabular}{c c c c c c c c c c c} \hline
**HIGH** & **Rec** & **F\({}_{1.8}\)S** & **Info** & **MEDIUM** & **F-S** & **Rec** & **Prec** & **LOW** & **Prec** & **F\({}_{9.8}\)S** & **Mark** \\ \hline Arachni + CCE + CAIST & 1.00 & 1.00 & Arachni + CCE + CAIST & 1.00 & 1.00 & 1.00 & Arachni + CCE + CAIST & 1.00 & 1.00 & 1.00 \\ ZAP + Arachni + CCE & 1.00 & 0.98 & 0.95 & ZAP + Arachni + CCE & 0.98 & 1.00 & 0.95 & ZAP + Arachni + CCE & 0.95 & 0.99 & 0.95 \\ ZAP + CCE + CAIST & 1.00 & 0.98 & 0.95 & ZAP + CCE + CAIST & 0.98 & 1.00 & 0.95 & ZAP + CCE + CAIST & 0.95 & 0.99 & 0.95 \\ Fortify + Arachni + CCE & 1.00 & 0.85 & 0.43 & ZAP + Arachni + CUST & 0.93 & 0.92 & 0.95 & ZAP + Arachni + CAIST & 0.95 & 0.92 & 0.87 \\ Fortify + CCE + CAIST & 1.00 & 0.85 & 0.43 & Fortify + Arachni + CCE & 0.78 & 1.00 & 0.63 & Fortify + Arachni + CCE & 0.63 & 0.90 & 0.63 \\ Fortify + ZAP + CCE & 1.00 & 0.85 & 0.42 & Fortify + CCE + CAIST & 0.78 & 1.00 & 0.63 & Fortify + CCE + CAIST & 0.63 & 0.90 & 0.63 \\ FSB + ZAP + CCE & 1.00 & 0.83 & 0.33 & Fortify + ZAP + CAIST & 0.77 & 1.00 & 0.63 & Fortify + ZAP + CAIST & 0.63 & 0.98 & 0.62 \\ FSB + Arachni + CCE & 1.00 & 0.83 & 0.33 & Fortify + Arachni + CAIST & 0.77 & 0.99 & 0.63 & Fortify + ZAP + CAIST & 0.63 & 0.90 & 0.63 \\ FSB + Arachni + CCE & 1.00 & 0.83 & 0.33 & FSB + ZAP + CCE & 0.75 & 1.00 & 0.60 & Fortify + ZAP + Arachni & 0.62 & 0.85 & 0.49 \\ FSB + CCE + CAIST & 1.00 & 0.83 & 0.33 & FSB + ZAP + CAIST & 0.75 & 1.00 & 0.60 & FSB + ZAP + CCE & 0.60 & 0.88 & 0.60 \\ FSB + Fortify + Arachni & 1.00 & 0.81 & 0.23 & FSB + Arachni + CCE & 0.75 & 1.00 & 0.60 & FSB + Arachni + CCE & 0.60 & 0.88 & 0.60 \\ FSB + Fortify + CCE & 1.00 & 0.81 & 0.23 & FSB + CCE + CAIST & 0.75 & 1.00 & 0.60 & FSB + Arachni + CAIST & 0.60 & 0.88 & 0.60 \\ FSB + Fortify + CCE & 1.00 & 0.81 & 0.23 & FSB + CCE + CAIST & 0.75 & 1.00 & 0.60 & FSB + Arachni + CAIST & 0.60 & 0.88 & 0.60 \\ FSB + Fortify + CCE & 1.00 & 0.81 & 0.23 & FSB + CCE + CAIST & 0.75 & 1.00 & 0.60 & FSB + Arachni + CAIST & 0.60 & 0.88 & 0.60 \\ FSB + Fortify + CAIST & 1.00 & 0.81 & 0.23 & Fortify + ZAP + Arachni & 0.74 & 0.94 & 0.62 & FSB + CSE + CAIST & 0.60 & 0.88 & 0.60 \\ Fortify + Arachni + CAIST & 0.98 & 0.85 & 0.42 & FSB + ZAP + Arachni & 0.74 & 0.98 & 0.59 & FSB + ZAP + Arachni & 0.99 & 0.87 & 0.54 \\ Ftility + ZAP + CAIST & 0.99 & 0.84 & 0.41 & FSB + Fortify + Arachni & 0.72 & 0.72 & 1.00 & 0.56 & FSB + Fortify + ZAP & 0.56 & 0.87 & 0.56 \\ FSB + ZAP + Arachni & 0.98 & 0.82 & 0.31 & FSB + Fortify + Arachni & 0.72 & 1.00 & 0.56 & FSB + Fortify + Arachni & 0.56 & 0.87 & 0.56 \\ Forthy + ZAP + Arachni & 0.94 & 0.81 & 0.36 & FSB + Fortify + CCE & 0.72 & 1.00 & 0.56 & FSB + Fortify + CAIST & 0.56 & 0.87 & 0.56 \\ ZAP + Arachni & 0.92 & 0.93 & 0.87 & FSB + Fortify + CAIST & 0.72 & 1.00 & 0.56 & FSB + Fortify + CAIST & 0.56 & 0.87 & 0.56 \\ \hline \end{tabular}
\end{table} 
Table 10: Ranking of 3-tools combinations according to distinct level of web application criticality. Figure 7: Rankings for (**a**) high, (**b**) medium and (**c**) low criticality levels for 2-tools combinations. Figure 8 includes three graphics to show the rankings of 3-tools combinations for each criticality level having into account the first metric used for each classification. High (a): Recall; Medium (b): F-measure and Low (c): F\({}_{0.5}\) Score. For high level the combinations that include 2 DAST tools have a word results for recall metric. For high and medium levels, combinations between DAST and IAST tools obtain the best results. Figure 8: Rankings for (**a**) high, (**b**) medium, and (**c**) low criticality levels for 3-tools combinations.