Static Application Security Testing (SAST) is a set of technologies designed to analyze source code, bytecode, or binary code to identify security vulnerabilities. It is often referred to as "White Box Testing" because it provides visibility into the internal structure of the application.
To understand the hybrid term, we have to split it into its two halves. owasp sast
The tool builds a symbol table to understand variable scope, type definitions, and function signatures. It answers questions like, "Is variable x an integer or a string?" and "Where was x defined?" Static Application Security Testing (SAST) is a set
By filtering through the OWASP lens, you move from "Code linting" to "Business risk assessment." owasp sast