Debunking myths around RASP (Runtime Application Self-Protection) technology

Welcome to the second part of this series examining some of the myths that I’ve heard in many conversations around Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) while working at Contrast. Over the past four years, I have had the pleasure of discussing RASP with both open-minded individuals and Web Application Firewall (WAF) traditionalists and found that both groups often make incorrect assumptions and assertions about how RASP works. Let’s drill into some of those common myths. …

application application security appsec iast myths protection rasp runtime runtime application self-protection technology