Interactive application security testing (abbreviated as IAST) is a
security testing
Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and maintain functionality as intended. Due to the logical limitations of security testing, pass ...
method that detects software vulnerabilities by interaction with the program coupled with observation and sensors. The tool was launched by several application security companies.
It is distinct from
static application security testing
Static may refer to:
Places
*Static Nunatak, in Antarctica
*Static, Kentucky and Tennessee, U.S.
*Static Peak, a mountain in Wyoming, U.S.
**Static Peak Divide, a mountain pass near the peak
Science and technology Physics
*Static electricity, a n ...
, which does not interact with the program, and
dynamic application security testing, which considers the program as a
black box
In science, computing, and engineering, a black box is a system which can be viewed in terms of its inputs and outputs (or transfer characteristics), without any knowledge of its internal workings. Its implementation is "opaque" (black). The te ...
. It may be considered a mix of both.
References
Security testing
{{Computer-security-stub