Software penetration testing
Brad Arkin, S. Stender, Gary E. McGraw · IEEE Security & Privacy · 2005
Quality assurance and testing organizations are tasked with the broad objective of assuring that a software application fulfills its functional business requirements. Such testing most often involves running a series of dynamic functional tests to ensure proper implementation of the application's features. However, because security is not a feature or even a set of features, security testing doesn't directly fit into this paradigm.