The basic level of security testing includes the following key activities:
- Static Application Security Testing (SAST): Reviewing the source code to identify vulnerabilities without executing the code.
- Dynamic Application Security Testing (DAST): Analysing the running application to detect vulnerabilities in a live environment.
- Software Composition Analysis (SCA)- Analysing the software libraries to check for software licenses and vulnerable libraries.
- Penetration Testing: Simulating an attack to find exploitable vulnerabilities.
- Vulnerability Scanning: Using automated tools to scan the application for known vulnerabilities.