New answers tagged vulnerability-scanners
0
Before thinking about purchasing a security tool you should define the problem your are trying to solve. Then you can define true positive and true negative testcases. These test cases can be evaluated against a selection of tools which advertise to solve your defined problems.
Testcases for SAST - Static Application Security Testing - Tools like Sonarqube:
...
0
There is no "easy" answer to this, as in "just follow these steps and you'll know if it works". Tools like the ones you mentioned will do their best to analyze an application and notify you of possible problems, before they become genuine problems.
So in general, there are 4 kinds of outcomes possibe when the software scans some code:
1. ...
2
The type of security tool you're testing will dictate what type of testing container you'll need. If you're testing malware detection, grab a container that contains the EICAR malware test file. If you want to test against an application that has intentional vulnerabilities, spin up a Damn Vulnerable Web App (DVWA) container.
If you want to see if they'll ...
Top 50 recent answers are included