arrow
返回

Open Source Solutions for Vulnerability Assessment: A Comparative Analysis

delete2023-01-01
delete3
delete
OA
AI
D
Dinis Barroqueiro Cruz *
J
João Rafael Almeida
J
José Luís Oliveira
DOI:10.1109/ACCESS.2023.3315595delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
As software applications continue to become more complex and attractive to cyber-attackers, enhancing resilience against cyber threats becomes essential. Aiming to provide more robust solutions, different approaches were proposed for vulnerability detection in different stages of the application life-cycle. This article explores three main approaches to application security: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). The analysis conducted in this work is focused on open-source solutions while considering commercial solutions to show contrast in the approaches taken and to better illustrate the different options available. It proposes a baseline comparison model to help evaluate and select the best solutions, using comparison criteria that are based on community standards. This work also identifies future opportunities for application security, highlighting some of the key challenges that still need to be addressed in order to fully protect against emerging threats, and proposes a workflow that combines the identified tools to be used for vulnerability assessments.
Keyword:
Application security
Virtual machining
Virtualization
Software testing
static application security testing
dynamic application security testing
software composition analysis
vulnerability assessment

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

U
universidade de aveiro
学者数:
1.3W
论文数: 1.4W
被引数: 24
引用论文

引用论文

Spermidine may decrease ER stress in pancreatic beta cells and may reduce apoptosis via activating AMPK dependent autophagy pathway
err2011-10-01
err0
PREAI
errP.B. Tirupathi Pichiah; U. Suriyakalaa; S. Kamalakkannan; P. Kokilavani; S. Kalaiselvi; D. SankarGanesh; J. Gowri; G. Archunan; Youn-Soo Cha; S. Achiraman
err分享
err收藏
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
学者 查看更多内容