This section introduces white box testing for security, how to perform white
box testing, and tools and techniques relevant to white box testing. It brings
together concepts from two separate domains: traditional white box testing
techniques and security testing. It assumes the reader to be familiar with
general concepts of software security. Refer to other content areas on this
portal to learn different aspects of software security.
This section will help security developers and testers understand white box
testing for security and how to effectively use the approach, tools, and
techniques applicable to white box testing.
The section is organized into separate sections dealing with what white box
testing is, how to perform white box testing, what results to expect, the
business case to justify white box testing, skills and training required to
perform white box testing, and a brief case study.