ishenwei/nexus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto-sync: 2026-04-21 17:12

Browse Source
This commit is contained in:
weishen
2026-04-21 17:12:45 +08:00
parent 914c8f6925
commit 0fe7ba237f
1888 changed files with 220 additions and 68174 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
wiki/concepts/IAST.md
View File

@@ -1,21 +0,0 @@
---
title: "IAST（交互式应用安全测试）"
type: concept
tags: [安全, 测试, 运行时]
sources: [what-is-devsecops-best-practices-benefits-and-tools]
last_updated: 2026-04-16
---
## Definition
IAST（Interactive Application Security Testing）在应用程序运行时动态分析行为，检测运行时刻的安全问题，可发现 SAST 和 DAST 可能遗漏的漏洞。
## Characteristics
- 在测试和部署阶段使用
- 通过插桩技术监控应用行为
- 实时检测运行时漏洞
- 适合测试环境
## Connections
- [[DevSecOps]] ← uses ← [[IAST]]
- [[SAST]] ← complements ← [[IAST]]
- [[DAST]] ← complements ← [[IAST]]