Skip to content
Research Article Open access CC BY 4.0

Evaluating the Top Application Security Tools: From Static Analysis to Runtime Protection

Alexandre Anacleto Libanio Xavier Fernandes

Asian Journal of Research in Computer Science · pp. 119–127 · Published 5 Jul 2024

10.9734/ajrcos/2024/v17i7483

Abstract

This review article evaluates the effectiveness of application security tools, including static analysis techniques and runtime protection mechanisms, against the backdrop of the growing global cybersecurity market and evolving cyber threats. Through a comprehensive review, the study aims to assist developers, security professionals, and organizations in selecting the most effective tools to enhance application security. Employing a mix of theoretical analysis and empirical benchmarking, the paper analyzes static application security testing (SAST), dynamic application security testing (DAST), and runtime application self-protection (RASP) technologies. Findings indicate that while SAST tools are essential for early vulnerability detection, they may generate false positives and overlook runtime vulnerabilities. DAST tools, in contrast, effectively identify runtime issues but lack insight into internal application processes. RASP technologies offer real-time protection but face integration and performance challenges. The paper concludes with a recommendation for a layered security approach, combining SAST, DAST, and RASP tools to achieve comprehensive application security, thus contributing a novel perspective to the discourse on cybersecurity tool efficacy.

Application security cybersecurity SAST DAST RASP vulnerability detection software development lifecycle real-time protection cyber threats security tools

References (13)

  1. 1 An empirical study of security warnings from static application security testing tools [DOI]
  2. 2 Supporting Cyber-Security Based on Hardware-Software Interface Definition [DOI]
  3. 3 Interactive Application Security Testing [DOI]
  4. 4 A Systematic Review and Analytical Evaluation of Security Requirements Engineering Approaches [DOI]
  5. 5 Advancing Cloud Technology Security: Leveraging High-Level Coding Languages like Python and SQL for Strengthening Security Systems and Automating Top Control Processes [DOI]
  6. 6 Comparative analysis of the effectiveness of OWASP ZAP, Burp Suite, Nikto and Skipfish in testing the security of web applications [DOI]
  7. 7 Recommendations for Enhancing Security in Microservice Environment Altered in an Intelligent Way [DOI]
  8. 8 Practical web security testing: Evolution of web application modules and open source testing tools [DOI]
  9. 9 Research Into the Security Threat of Web Application [DOI]
  10. 10 Integrating Application Security Testing Tools into ALM Tools in the Automotive Industry [DOI]
  11. 11 Towards Configurable Cloud Application Security [DOI]
  12. 12 Implementation of Square Methods in Analyzing the Security of an Application System [DOI]
  13. 13 Microcontroller-based Security System for an Industrial Complex: Design, Fabrication and Testing [DOI]

Cited by 0

No indexed citations yet.

Related research

Article metrics

Real usage data collected on this platform.

10

Page views

0

PDF downloads

1

Outbound clicks

0

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.