SCA stands for Software Composition Analysis. It’s a technique where you try to analyze the dependencies that your application includes to make sure that they don’t have any known vulnerabilities. In fact, up to 80% of the components that we include in our applications have some known vulnerability in them which can expose our applications […]
RASP stands for Runtime Application Self Protection. Like IAST it’s agent based, so it watches your software run and tries to determine if something is attacking it. The goal of IAST is to try to determine if something’s attacking it by a certain behavior. RASP adds a layer to that by recognizing something’s attacking it […]
IAST stands for Interactive Application Security Testing. The basic idea is that you have software that watches your application running, usually in a Java or .NET world that uses what’s called the profiling API, and it watches everything that happens in your application and tries to determine if that activity is somehow attacking the software. […]
DAST stands for Dynamic Application Security Testing, and it’s a blackbox suite of tools that really look at web applications on the front end. DAST looks at a running application looking for potential security vulnerabilities, architectural weaknesses, SQL injection, and cross-site scripting, among other security risks in the OWASP Top Ten. How is SAST different […]
SAST stands for Static Application Security Testing. SAST look through application source code for security defects, different issues written into the source code, and how the application is actually programmed to identify vulnerabilities that then have the potential being exploited. How is SAST different from DAST? SAST typically takes less time than running DAST, and […]
We like to take a look at our top blogs each year and see what everyone is interested in so we can create interesting content for the new year.
Load and performance issues can be difficult to resolve when found late in the software development lifecycle, yet teams still often wait until the last minute to performance test their applications. This can be costly, especially if the problem ends up being an issue with the overall architecture of the application. Load and performance testing […]
I recently had the pleasure of being introduced to the team over at LambdaTest. LambdaTest runs a cross-browser cloud infrastructure that allows the execution of Appium and Selenium tests remotely. I was intrigued to learn more about their infrastructure and tooling, as it seemed like something that should fit in nicely with Selenified. I signed […]
If business people and developers—and testers—aren’t regularly communicating, development teams will never be able to deliver the value the business is looking for.
Another quarter, another Selenified release in the books. Nothing huge in this release, just some small feature updates and enhancements. Additional Reporting Features The custom Selenified reports have been updated to include some additional information. Previously, when parameterized tests were executed, the individual results weren’t easily identified in the report. This has been fixed, with […]
