Let's start with the new lecture in this lecture, me having to cover different categories of testing.
Fairness after an application is developed, it is essential to make various kinds of tests to ensure
the product is completely safe and systematic to perform such tests, multiple techniques are available
like black box, white box and green box.
Each of these techniques or test approaches provide different possibilities.
The black box listing in this kind of testing, you don't need any knowledge of the internal workings
structure.
You can work with the graphical user interface for test cases.
Black box testing is popularly called as functional testing, closed box testing and data driven testing.
This outlook towards the testing involves trial methods and irrigation techniques, as the test does
not require any knowledge of the internal coding of the software.
Moreover, it is not regarded for algorithm testing.
Next is the white box testing.
You don't need any knowledge regarding the internal workings structure that is coding of the software
when dealing with the white box testing.
It is also called structural testing code based testing, transparent testing and clear box testing.
In this testing, verification of the system boundaries and data roaming is the fundamental and there
is no absence of internal coding knowledge.
Also, it is correctly fitted for algorithm testing.
The most important benefit of the white box testing is that the company provides the entire information
of the internal organization of the company.
Next is the gray box testing in this type of testing, you need limited knowledge of the internal workings
structure.
It is usually known as translucent testing as a test, whether this is partial knowledge of the coding
or internal system.
If you have knowledge and especially about appalling data domains and internal testing boundaries of
the software box testing is not suitable for algorithm testing.
The company provides you partial knowledge of the internal system.
How to select a testing methodology, the testing approach you should use depend on a number of factors,
including time allocated to the assessment, access to internal application resources and the goals
of the test.
Tests intended to best approximate short term effects of the attackers with limited resources can be
conducted using blackbox methodologies.
If the test is intended to reflect longer term effects of the attackers who have more significant resources,
Gary works best can help to reflect knowledge that attackers might learn about the applications internals
without requiring the assessment team to explain the full amount of resources that would be available.
Placas teams that need to make the most insightful and far reaching recommendations about the applications
with limited amount of time should use white box or clear box testing.
Security testers should be flexible and be able to plan for any of these scenarios, given the time
and access to resources available for an application.
This is the most important thing in white box testing as the entire information is provided to you.
Analysts consider testing methodology that will maximize the security benefits of the findings within
the given constraints.
Given an understanding that the time and testing resources favor attackers in the wild, assessments
team should optimize their activities accordingly.
Next is the types of testing network penetration testing in Network Peaty.
You be testing the network environment for potential security vulnerabilities and threats.
This test is divided into two categories.
External and internal testing and external testing would involve testing the public IP address, whereas
in an internal test you can become part of the internal network and test that network.
You may be provided a VPN access to the network or would have to physically go to the work environment
for testing.
Next is a Web application, peaty web application penetration testing is very common nowadays since
the application hosts critical data such as the credit card numbers, usernames and passwords.
Therefore, this type of investing has become more common than network.
When testing mobile application and testing the mobile application, Peaty is the newest.
They will find testing that has become common since almost every organization use Android and iOS based
mobile applications to provide services to their customers.
Therefore, organizations want to make sure that their mobile applications are secure enough for users
to rely on the company.
Next is the social engineering protesting the social engineering party can be a part of network protesting
in a social engineering party, the organization may ask you to attack its users.
This is where you use spearfishing, attacks and browser experts to trick a user into doing things they
did not intend to do.
So in the last is the physical penetration.
Testing of physical beauty is what you would really be doing in your career as a protester.
In physical penetration testing, you would be asked to walk into the organization's building physically
and test physical security controls such as locks and RFID mechanisms.
In the next lecture, we will see the phases of testing.