White Box- All the information are provided to the testers.
Black Box- No information is provided to the testers and they can test the system in real world scenario.
Grey Box- Partial information is with the testers and rest they have to rest on their own.
Question 15. 列举开源安全测试方法手册列出7种主要范例的安全测试？
根据开源安全测试方法手册，7种主要的安全测试范例是：
1.弊端扫描：自动软件针对已知的弊端扫描系统。
2.安全扫描:手动或自动识别网络和系统缺点的技能。
3.渗透测试：渗透测试是关于安全测试的，它有助于识别系统中的弊端。
4.风险评估：包罗对系统中可能的风险进行分析。风险分为低、中、高三种。
5.安全审计：完成对系统和应用程序的检查，以检测弊端。
道德黑客:为检测系统中的缺陷而非个人利益而对系统进行的黑客攻击。
7.态势评估：将安全扫描、道德黑客和风险评估结合起来，以体现组织的总体安全态势。
英文：
The seven main types of security testing as per Open Source Security Testing methodology manual are:
Vulnerability Scanning: Automated software scans a system against known vulnerabilities.
Security Scanning:Manual or automated technique to identify network and system weaknesses.
Penetration testing: Penetration testing is on the security testing which helps in identifying vulnerabilities in a system.
Risk Assessment: It involves analysis of possible risk in the system. Risks are classified as Low, Medium and High.
Security Auditing:Complete inspection of systems and applications to detect vulnerabilities.
Ethical hacking:Hacking done on a system to detect flaws in it rather than personal benefits.
Posture Assessment:This combines Security scanning, Ethical Hacking and Risk Assessments to show an overall security posture of an organization.
