Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

Share this Page URL

Chapter 7. Secure Development Lifecycle > Security testing - Pg. 145

7: Secure Development Lifecycle Security testing After the design and development phases, the next phase in the SDLC is testing. Along with other forms of testing like functional testing, performance testing, etc., security testing is also very important. Security testing ensures that the security controls identified in the design phase have been implemented properly. It also finds out any new weaknesses th at either were not identified during threat modelling or were introduced later as a result of changes. There are three types of security test: · Black box testing · Grey box testing · White box testing.