QuestionQ16

Security Testing Standards and Best Practices

Why do test oracles derived from standards and best practices benefit security testers?

  • A Best practices may determine expected results, which can be used as evidence of the application being secure or insecure
  • B Standards may describe the way the test oracles should be formally defined and implemented
  • C Best practices are an effective way to specify security requirements for software development
  • D Standards are established by a consensus of subject matter experts and approved by a recognized body
Explanation

Security best practices can specify expected results for known vulnerabilities. Comparing executed low-level security-test results with those expectations provides evidence that the system is secure or insecure.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!