Method evidence record

Dynamic Application Security Testing

Dynamic Application Security Testing (DAST) is a security analysis technique that tests a running application by sending various inputs and observing responses to identify vulnerabilities and security flaws. Developed in the 2000s as a complement to static analysis, DAST exercises the application at runtime, finding vulnerabilities that only manifest during execution such as authentication bypass, insecure redirects, and logic flaws. DAST is commonly used for web application testing and is considered a black-box testing approach since the tester requires no knowledge of internal code structure.

Evidence statusSources recorded, not reviewedBibliographic sources are present. Claim-level evidence review has not been performed.

Source record

Recorded

Citations copied verbatim from the method’s source record. No claim-level verification is inferred from them.

Curated claims

Assessed

Claims persisted in the evidence ledger, each with its own assessment.

No curated claims yet

This view does not invent a claim assessment when the ledger has none.

Related methods

Suggested3

Generated from the method graph and shown as machine-suggested relations. No evidence claim is inferred.