From the course: Cisco CCNP SCOR v1.1 Security (350-701) Cert Prep: 2 Cloud and Content Security

Unlock this course with a free trial

Join today to access over 22,600 courses taught by industry experts.

Application and data security

Application and data security

From the course: Cisco CCNP SCOR v1.1 Security (350-701) Cert Prep: 2 Cloud and Content Security

Start my 1-month free trial Buy for my team

Application and data security

“

- [Instructor] In addition to using CICB pipeline testing to validate our applications and the data used with them. There are several other assurance tools and methods that we should employ. Application protection means that the data interacting with our code has security protection as well. And there are many ways to do this. A few of which we'll explore here. Application security testing falls under two main methodologies. Static application security testing and dynamic application security testing. Static application security testing is what we refer to as a white box method for testing. This means that we test from the inside out and that we have access to the underlying framework, design and implementation of the application. This is a typical developer approach to application testing. This doesn't require a deployed application but instead uses analysis against the source code itself to test for vulnerabilities…

Contents