Apparatus and method for performing dynamic security testing using static analysis data

A non-transitory computer readable storage medium, comprising executable instructions to:

• execute a dynamic analysis of target code to identify a first set of identified security issues, wherein the dynamic analysis includes retrieving Uniform Resource Locators (URLs) and corresponding class files from monitors in the target code and wherein each security issue in the first set of identified security issues includes a first security category, a complete URL, and a first common parameter name;
• perform a static analysis of the target code to identify a second set of identified security issues, wherein the first set of identified security issues are used to tailor the static analysis and wherein each security issue in the second set of identified security issues includes a second security category, a partial URL, and a second common parameter name;
• and
• compare the first set of identified security issues and the second set of identified security issues to report common security issues wherein common identified security issues include the first security category that matches the second category, the complete URL that matches the partial URL, and the first common parameter name that matches the second common parameter name.