Category Archives: SAST

Software Composition Analysis: Developers’ Security Silver Bullet

Posted on by

Security experts are always looking for a silver bullet. New products promise to resolve all your issues. Typically, these products overpromise to expand market share. Most attacks we see these days occur not because of genius attacks. Instead, they’re due to the company not following the simplest defensive practices. Keeping patches up-to-date and having strong […]

The post Software Composition Analysis: Developers’ Security Silver Bullet appeared first on Security Intelligence.

Continue reading Software Composition Analysis: Developers’ Security Silver Bullet→

Why the Demand for Application Development Security Skills Is Exploding

Posted on by

Application development security is a key task when it comes to looking to the future of cybersecurity. A recent industry study shows it is the fastest-growing cybersecurity skill for the year ahead. Demand is expected to increase by 164% over the next five years. Such growth would bump up the total number of job openings […]

The post Why the Demand for Application Development Security Skills Is Exploding appeared first on Security Intelligence.

Continue reading Why the Demand for Application Development Security Skills Is Exploding→

Defining Application Security

Posted on by

If you’re new to Application Security, you may be confused by the different terminology and where exactly Application Security fits relative to all the different phases of application development and during runtime of applications.
The post Defining Ap… Continue reading Defining Application Security→

What the Building In Security Maturity Model (BSIMM) Says About the Role of SAST and SCA

Posted on by

The BSIMM is an annual study of the real-world software security initiatives – “SSIs” in the report – across the software industry drawing from data and experience from 130 organizations. Rather than repeat the aim of the study, this quote sums it… Continue reading What the Building In Security Maturity Model (BSIMM) Says About the Role of SAST and SCA→

What AppSec Can Learn From Developers’ Feature Bug Workflows

Posted on by

In order to scale application security (AppSec) to meet the pace of the software feature development, AppSec must engage developers with new workflows that balance security and productivity. In order to meet this challenge, today we are announcing new … Continue reading What AppSec Can Learn From Developers’ Feature Bug Workflows→

Your Guide to AppSec Tools: SAST or SCA?

Posted on by

The application security market is saturated with tools like DAST, SAST, IAST, and RASP – which can be overwhelming. Each of these tools play a specific security role within the SDLC, but are they really representative of AppSec risk or just diff… Continue reading Your Guide to AppSec Tools: SAST or SCA?→

DevSecOps: The Best Security Strategy in 2020

Posted on by

Moving to a DevSecOps way of development ensures security from day one and reduces the possibility of data breaches later on Too often, developers overlook security testing until the end of the development cycle. By the time an application is up and r… Continue reading DevSecOps: The Best Security Strategy in 2020→

Vulnerable Software – The Gift that Keeps on Giving

Posted on by

Concerning the latest data breaches on record, this past May was rather noteworthy. A host of organizations from around the world announced in fact, that they had experienced a data breach.  From online retailers, travel booking sites, and high-te… Continue reading Vulnerable Software – The Gift that Keeps on Giving→

How to use NodeJsScan for SAST – Step-by-step Guide .

Posted on by

NodeJsScan is a static code scanner which is used to find security flaws specifically in Node.js applications. In this post, we..
The post How to use NodeJsScan for SAST – Step-by-step Guide . appeared first on BreachLock.
The post How to us… Continue reading How to use NodeJsScan for SAST – Step-by-step Guide .→

How to Use CodeWarrior for SAST – Step-by-step Guide

Posted on by

CodeWarrior is a SAST tool supporting multiple languages such as C, C#, PHP, Java, Ruby, ASP, and JavaScript for a variety of security..
The post How to Use CodeWarrior for SAST – Step-by-step Guide appeared first on BreachLock.
Th… Continue reading How to Use CodeWarrior for SAST – Step-by-step Guide→