Security regression testing and abuse case testing for technical teams Security testing is often treated as a point-in-time activity. A team runs a penetration test, fixes the findings, and moves on.

Traditional tests rely on enumerated examples (test-cases) written by the programmer – test cases miss out a whole class of bugs, ones that its authors are unaware of – the unknown unknowns. Reliance ...