DAST
Technology & Computing abbreviation · Cybersecurity
| Stands for | Dynamic application security testing |
|---|---|
| Categories | Technology & Computing |
DAST stands for Dynamic application security testing, a cybersecurity abbreviation.
Testing a running application from the outside by sending crafted requests, as an attacker would, to find vulnerabilities such as injection flaws, misconfigurations and authentication weaknesses.
Example: The nightly DAST scan of staging found an open redirect on the logout page.
Usage notes
Tools include OWASP ZAP and Burp Suite. Dynamic testing needs no source code and finds runtime issues, but cannot point to the vulnerable line. Also called black-box testing. Interactive testing (IAST) combines static and dynamic approaches.
Related abbreviations
More cybersecurity abbreviations
- CSRF – Cross-site request forgery
- CTF – Capture the flag
- CVE – Common Vulnerabilities and Exposures
- CVSS – Common Vulnerability Scoring System
- CWE – Common Weakness Enumeration
- DAC – Discretionary access control
- DDoS – Distributed denial of service
- DES – Data Encryption Standard
- DevSecOps – Development, security and operations
- DFIR – Digital forensics and incident response
- DH – Diffie-Hellman (key exchange)
- DKIM – DomainKeys Identified Mail