An application security testing of the application may be executed in two different manners. Either the source code files of this application form that's composed in a particular programming language have been scanned (static evaluation), and also the URL/IP of an already setup and functioning app is tested from remote (dynamic analysis).
https://testingxpertsuk.livejournal.com/7659.html