Practical Security Automation and Testing

What is BDD security testing?

ATDD stands for Acceptance Test-Driven Development, and BDD means behavior-driven development. In some scenarios, these two terms can be interchangeable. The purpose of adopting ATDD or BDD is to make security testing more transparent for all project members. The security testing results can provide quick feedback on the meeting of business objectives, for instance. The other purpose of BDD adoption is the provision of dynamic documentation for the whole project cycle, since BDD is done with an English-like language that follows the Given, When, Then (GWT) format.

In this book, we introduce the use of Robot Framework and Gauntlt to achieve BDD security automation testing. Here is a comparison of these two BDD ...