Why do test oracles derived from standards and best practices benefit security testers?
Security best practices can specify expected results for known vulnerabilities. Comparing executed low-level security-test results with those expectations provides evidence that the system is secure or insecure.
Community Discussion