Why security testing is hard
Herbert H. Thompson · IEEE Security & Privacy · 2003
Software testing fairly readily detects a program's failure to do what it is designed to do, but does not detect all of the other things that it may do in the process. Some of these may compromise security. The article discusses the development of methods and software tools to deal with these bugs.