What are SAST and DAST, and why are they performed?

Question

Accepted Answer

SAST and DAST are security testing techniques used to identify vulnerabilities in software applications.

SAST (Static Application Security Testing) is performed on the source code of an application to identify security vulnerabilities before the application is compiled and deployed.
DAST (Dynamic Application Security Testing) is performed on a running application to identify vulnerabilities in real-time.
SAST is useful for identifying vulnerabilities early in the development process, while DAST is useful for identifying vulnerabilities in a deployed application.
Both SAST and DAST are important for ensuring the security of software applications and should be performed regularly.
Examples of SAST tools include SonarQube, Checkmarx, and Fortify, while examples of DAST tools include Burp Suite, OWASP ZAP, and Acunetix.

Interview Questions from Popular Companies