Starting with a Recon Session
The biggest difference between exploring features under development and using exploratory techniques to characterize an existing system is in the kind of information you are seeking. When you’re exploring new development, you’re usually looking for emerging risks and vulnerabilities resulting from design and implementation decisions. When you’re exploring an existing system, you may want to discover risks, but first you need to find out what it does, what it interfaces with, and how the pieces and parts all connect together.
A recon session is a special kind of session in which you begin mapping the territory of the system. At the end of a recon session you’ll know more about the scope of exploration required ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access