practitionerleaderThreat Modeling
Test business logic, not only black-box behavior
Said by Jay Bobo ·
“But if we want to get something that is valuable, For, uh, us, then we need to move away from this black box, gray box testing, and we need to get into something where opening stuff up and starting to get into some of the business logic issues.”
Transcript evidence from Jay Bobo & Darylynn Ross -- App Sec Is Dead. Product Security Is the Future..