Leveraging Risk Based Testing in Enterprise Systems Security Validation

As the security breaches continue to grow, and as project teams become larger and more distributed the cost of testing the security of the software systems will increase rapidly. Companies that take the time to test the security of their software systems before releasing it to production are at a disadvantage because of higher costs and potential late arrival to the market. On the other side of the fence additional financial incentives may come from customers demanding a certain level of security testing from a software supplier, before agreeing to sign a contract to purchase their products. This document discusses and provides information on proven risk based techniques for software security testing that provides the test coverage needed while maintaining the time to market under competitive cost pressures without compromising security.