Hands-On RESTful API Design Patterns and Best Practices

White-box penetration testing

White-box testing is also known as structure-testing, open-box, clear-box, and glass-box testing. The white-box pen test is a comprehensive testing methodology, as you get a whole range of information about the schema, source code, models, and so on, before starting the testing. White-box tests are intended to scrutinize the code and catch any design and development errors. They are simulations of internal security attacks.

API pen tests rely on white-box testing for the following reasons:

• The tests run on all of the independent paths of a module
• The tests confirm and verify all logical decisions (true/false) inside the code
• The tests execute syntax checking, and so find typographical errors that are critical ...