Browse Definitions :
Definition

runtime application self-protection (RASP)

Contributor(s): Ivy Wigmore

Runtime application self-protection (RASP) is security software that integrates with an application or its runtime environment during execution and constantly intercepts calls to the application to check their security, permitting those deemed safe and blocking those that could indicate an attack. RASP can protect against application attacks such as SQL injection because it can make sense of the commands involved and distinguish normal sequences from suspicious instructions or requests.

Application security is often neglected during software development and most apps lack the capacity to detect and block attacks. RASP adds security to applications that might otherwise be vulnerable. Because it has insight into what's happening within the application, RASP can analyze application behavior and the context in which it occurs, unlike perimeter-based protection, such as web application firewalls (WAF). That capacity makes it possible for the software to respond to attacks in real time.

RASP has two operational modes. In diagnostic mode, the software monitors calls to the application and sounds an alarm if a suspect call is made. In self-protection mode, RASP can prevent the execution of suspect instructions or terminate a user session.

RASP technology is designed for the two most popular application servers, Java virtual machine (JVM) and .NET Common Language Runtime. Additional implementations are expected. Vendors of RAST products include Contrast, HP, Immunio, Promon, Veracode, Waratek and WhiteHat Security.

Joseph Feiman first advocated the concept behind RASP in his 2014 research report, "Stop Protecting Your Apps; It's Time for Apps to Protect Themselves."

Jeff Williams delivers an introductory tutorial on RASP:

This was last updated in February 2017

Continue Reading About runtime application self-protection (RASP)

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • Malwarebytes software

    Malwarebytes is a cross-platform anti-malware program that detects and removes malware and other rogue software.

  • Transport Layer Security (TLS)

    Transport Layer Security (TLS) is a protocol that provides authentication, privacy, and data integrity between two communicating ...

  • van Eck phreaking

    Van Eck phreaking is a form of electronic eavesdropping that reverse engineers the electromagnetic fields (EM fields) produced by...

SearchHealthIT

SearchDisasterRecovery

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

  • business continuity software

    Business continuity software is an application or suite designed to make business continuity planning/business continuity ...

  • business continuity policy

    Business continuity policy is the set of standards and guidelines an organization enforces to ensure resilience and proper risk ...

SearchStorage

  • solid-state storage

    Solid-state storage (SSS) is a type of computer storage media made from silicon microchips. SSS stores data electronically ...

  • persistent storage

    Persistent storage is any data storage device that retains data after power to that device is shut off. It is also sometimes ...

  • computational storage

    Computational storage is an information technology (IT) architecture in which data is processed at the storage device level to ...

Close