返回
Open Source Solutions for Vulnerability Assessment: A Comparative Analysis
DOI:10.1109/ACCESS.2023.3315595.png)
摘要
En 中文
As software applications continue to become more complex and attractive to cyber-attackers, enhancing resilience against cyber threats becomes essential. Aiming to provide more robust solutions, different approaches were proposed for vulnerability detection in different stages of the application life-cycle. This article explores three main approaches to application security: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). The analysis conducted in this work is focused on open-source solutions while considering commercial solutions to show contrast in the approaches taken and to better illustrate the different options available. It proposes a baseline comparison model to help evaluate and select the best solutions, using comparison criteria that are based on community standards. This work also identifies future opportunities for application security, highlighting some of the key challenges that still need to be addressed in order to fully protect against emerging threats, and proposes a workflow that combines the identified tools to be used for vulnerability assessments.
Keyword:
Application security
Virtual machining
Virtualization
Software testing
static application security testing
dynamic application security testing
software composition analysis
vulnerability assessment
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Fluoxetine and citalopram decrease microglial release of glutamate and d-serine to promote cortical neuronal viability following ischemic insult氟西汀和西酞普兰减少小胶质细胞释放谷氨酸和d-丝氨酸,以促进缺血性损伤后皮质神经元的活力
Time‐dependent enhancement of hippocampus‐dependent memory after treatment with memantine: Implications for enhanced hippocampal adult neurogenesis
Hippocampus
IF0

