7 terms
A bug bounty is a program in which an organization pays independent researchers for valid security vulnerabilities reported under defined rules.
DAST (dynamic application security testing) probes a running application from the outside to find vulnerabilities that appear at runtime.
Fuzzing is a security testing technique that feeds large volumes of malformed or random inputs to software to uncover crashes and exploitable bugs.
Penetration testing is an authorized simulated attack in which security testers exploit vulnerabilities to show their real business impact before attackers do.
A red team is an authorized group that emulates real attackers against an organization to test how well its people, processes and tools detect and respond.
SAST, static application security testing, analyzes source code, bytecode or binaries without running them to find security flaws early in development.
Vulnerability scanning is the automated inspection of systems and applications for known weaknesses, misconfigurations and missing security patches.