BDD security testing is very suitable when your security testing reports will be shared with external vendors, or even internal, cross-team communication to understand what security testing cases are being executed. In addition, BDD security tests can help you to integrate all of the various kinds of security testing tools and consolidate testing reports based on the framework.
Let's look at a simple example to understand what behavior-driven security testing is. Under the behavior-driven security testing framework, the security testing scripts are the testing cases that are written in a human-readable language. It makes the security testing cases, and testing results, easily understood by non-security professionals. Here is an example of this human-readable script:
|
Scenario: The attack may execute a system command to gain... |
