Risk-based testing
Functional testing ensures that a piece of software does what it is supposed to do under normal circumstances
Risk-based testing considers what a bad guy might do based on risks identified by a security analysis
- this is a fundamentally creative form of testing
- only as strong as risk generation that it relies on