An organization wants to scan their running application periodically to find vulnerabilities. Which of the following security practices will be helpful?

Dynamic Application Security Testing $($DAST$)$

Static Application Security Testing $($SAST$)$

Threat Modeling

Attack Surface Analysis