OWASP 20th Anniversary Event

Abstract:Did you ever wonder what is the overlap between different scanning technologies? why should you use few different technologies, and is there a single technology to rule them all?Well, we did wonder about this exact topic and decided to once and for all find an answer.We knew that the information included in an IAST finding can be used to uniquely identify issues reported by DAST and SAST. We have built an automated correlation service that goes over vulnerabilities reported by the three technologies and automatically matches findings.In this session, you will learn about our findings. Did we find a significant overlap? which issue types are more common to be detected by one technology over the other? and is there one technology to rule them all?You will also learn about the value such correlation brings, whether you are a developer or security expert, and how using more technologies can actually reduce your work and shorten the time for remediation.

Dates

Author

Conferences

Tags

Automated Finding Correlation where do SAST, DAST and IAST overlap

tldr - powered by Generative AI