Hands-On Security in DevOps

Testing strategy

The testing strategy highlights the testing approaches for certain high-risk functions. The testing strategies can be a manual review, automation, or whitebox or blackbox testing. The whitebox testing primarily focuses on the source-code-level inspection, and the blackbox testing reviews the while application from end users' and hackers' perspectives. These testing strategies are normally executed using a mixed approach. The following table shows an example of testing strategies for the platform and the authentication function:

Testing strategy	Platform	Authentication
Manual review	NA	Design review
Automation	Fully automated scanning	Brute force attack
WhiteBox	Review configuration files