Security testing approaches: SAST and code review, DAST, IAST, penetration testing (black/white/grey box), red and blue teaming, human testing, threat modelling (STRIDE, DREAD), audits and compliance

This week’s topics

Security testing approaches: SAST and code review, DAST, IAST, penetration testing (black/white/grey box), red and blue teaming, human testing, threat modelling (STRIDE, DREAD), audits and compliance

1. The different approaches to security testing
2. The distinct roles that different security testing methodologies have in improving the security of cyber systems, and the advantages and disadvantages of different approaches

What you will be able to do

• 1.2 Explain the different approaches to security testing.
• 1.3 Analyse the distinct roles that different security testing methodologies have in improving the security of cyber systems, and the advantages and disadvantages of different approaches.

Activity

Seminar, guided reading and a short written task: explain the different approaches to security testing.

Study materials