Hi all,
Below are links to recent professional blog posts I made regarding the different classes of application security testing tools, what they do, and tips for selecting them. This is meant as an intro for a person who is technical in nature, but not necessarily experienced with these kinds of tools. I gave a talk with similar subject matter at the 2017 ISC2 Security Congress and received a lot of follow-up inquiries so there appears to be some interest in this. I hope it is helpful and am providing merely as a service - I work for a non-profit we don't get paid for web traffic ![Smiley Happy Smiley Happy](/i/smilies/16x16_smiley-happy.png)
I am presenting next week at 2018 ISC2 Security Congress with a follow-up talk on experiences getting these tools up and running once you've selected which tools to use. The session is Wed afternoon ("There Is No Plug & Play: Tips for Implementing Automated Software Security Testing Tools"). Hope to see you there!
Cheers!
https://insights.sei.cmu.edu/sei_blog/2018/07/10-types-of-application-security-testing-tools-when-an...
https://insights.sei.cmu.edu/sei_blog/2018/08/decision-making-factors-for-selecting-application-secu...