From the course: CompTIA SecurityX (CAS-005) Cert Prep

Unlock this course with a free trial

Join today to access over 24,300 courses taught by industry experts.

Software assurance

Software assurance

From the course: CompTIA SecurityX (CAS-005) Cert Prep

Start my 1-month free trial Buy for my team

Software assurance

“

- For you Security X candidates who are not developers, you're not programmers, this is going to be a very important lesson for you as we talk about different strategies for protecting that environment. We call that software assurance. It's a very important initiative. Now, fundamentally, our software assurance going back 20 or 30 years, starts with static testing, or SAST, which is a method of security testing that analyzes the source code or the byte code or the binary code of the function to look for vulnerabilities. SAST is performed usually early in the development lifecycle. This way, developers and programmers can see and detect those problems early, they can fix issues before it actually goes into that runtime state or it gets deployed. SAST tools can scan the code base for known vulnerabilities, so we would call this like a know all type of test, historically called a white list or a white box test. So you can see coding errors, you can find security weaknesses, provide…

Contents