Section 3: Lesson 6 - Software Security Test Plan

Key Terms

alpha level testing

testing done by the developers themselves

beta level testing

testing done by those not familiar with the actual development of the system

black box testing

tests from an external perspective with no prior knowledge of the software

Design and Development (A3) phase

the third phase of the security development life cycle, in which you analyze and test software to determine security and privacy issues as you make informed decisions moving forward with your software

external resources

resources hired on a temporary basis to come into a project, test the application, and report findings

functional testing scripts

step-by-step instructions for a specific scenario or situation

gray box testing

analyzes the source code for the software to help design the test cases

internal resources

resources from the company's organization

secure testing scripts

scripts created specifically for the application being tested

scripts

detailed, logical steps of instructions to tell a person or tool what to do during the testing

system test

test the system and its interaction with other systems

white box testing

tests from an internal perspective with full knowledge of the software

vulnerability assessments

examining a product to identify security deficiencie