The mass production of complex software has made it impossible to manually test it for security vulnerabilities. Automated security testing tools come in a variety of flavors, function at various stages of software development, and target different categories of software vulnerabilities. It is great that we have a plethora of automated tools to choose from, but it is a problem that their adoption and recognition are not prominent. The purpose of this study is to explore the possibilities of existing techniques while also broadening the horizon by exploring the future of security testing tools and related techniques.
翻译:复杂软件的大规模生产使得无法手工测试其安全弱点,自动安全测试工具有多种口味,在软件开发的不同阶段发挥作用,针对不同类别的软件弱点,我们有很多自动工具可供选择,但问题在于这些工具的采用和承认并不突出,本研究的目的是探索现有技术的可能性,同时通过探索安全测试工具和相关技术的未来,扩大视野。