Interactive Security Testing (IAST) Instrumentation Enables Deepest Test Coverage
NowSecure, the leading mobile app security and privacy software company, announced today that it has launched the world’s first Interactive Security Testing (IAST) purpose-built for mobile apps. With this innovative new feature, NowSecure provides its customers with better and deeper visibility into mobile app risks, security vulnerabilities, privacy issues and compliance gaps, empowering them to stay secure in an accelerating mobile threat landscape.
IAST is the technique of instrumenting an application from the “inside-out” to collect security testing telemetry as the mobile application runs. It was first developed for the web in 2015 and NowSecure is the first company to apply IAST to mobile. By inserting instrumentation inside a mobile app and capturing data in real-time, companies can easily identify more security risks and address them faster in Agile and DevOps processes.
Recommended AI News: AgilePQ and Aegex Announce New Partnership
“NowSecure understands that customers want comprehensive security and privacy testing solutions that are easy use,” said Alan Snyder, CEO of NowSecure. “We have always been market leaders in mobile app security and will continue to deliver innovation and value to our customers.”
There are 4.5 million apps in the Apple AppStore and Google Play™ and an estimated 25 million private internally developed mobile apps used by businesses and agencies. In 2019, there were 204 billion worldwide app downloads. The ComScore Global State of Mobile Report shows that 63 percent of all digital time is now spent on mobile apps.
As the use of mobile apps has exploded, so have mobile app security vulnerabilities and privacy issues. It’s now more important than ever that companies are proactive about preventing mobile app breaches and reducing risks. The NowSecure IAST capability provides deeper inspection into mobile app risks, security vulnerabilities and compliance gaps, with near zero false positives. It enables app owners and users to properly test mobile apps to protect their data, employees, customers, and users.
Recommended AI News: SkySwitch Announces Upgrade to Support Kari’s Law E911 Requirements
The NowSecure Platform uniquely combines Static Application Security Testing (SAST) with Dynamic Application Security Testing (DAST) and IAST to create a comprehensive approach that delivers the most robust, fully automated security and privacy analysis available. DAST provides instrumentation hooks at the kernel level in the mobile OS on device to drive external attack scenarios and analyze app interactions with the device OS, network and backend APIs from the “outside-in.”
IAST injects instrumentation code into the mobile binary to hook key app APIs to inspect mobile app, data and control flows from the “inside-out” as dynamic analysis runs. With SAST, the instrumentation tests mobile app binaries built in any language/framework/tool while covering the entire app, including proprietary written code, 3rd party libraries, frameworks, configuration and permissions.
“We think of it like a race car,” said Snyder. “If SAST is walking around and looking at the car and DAST is driving the car around the track to feel how it handles, then IAST is using sensors to collect data on how the car is actually performing under the hood. Like instrumentation in a modern race car, our IAST innovations deliver a plethora of security, privacy and data telemetry that enables much better understanding of mobile app performance and risk.”
NowSecure provides the best of all three worlds – SAST/DAST/IAST – and is the only vendor to deliver IAST for testing mobile apps. This IAST innovation comes from the NowSecure world-renowned expert security research team, including the creators or FRIDA and RADARE advanced open source security testing tools. NowSecure has twice been named a Market Leader by IDC in the MAST MarketScape.
Recommended AI News: Oro Unveils Feature-Packed OroCommerce Version 4.1
Comments are closed, but trackbacks and pingbacks are open.