From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Automation vs. manual testing

Automation vs. manual testing

- [Presenter] Application security testing includes a variety of automated and manual testing techniques. To keep up with all the security testing you'll be expected to perform, you'll want to understand when it makes sense to run manual tests, and when it makes sense to automate that testing activity. Well-planned automated security tests tend to be quicker and more consistent than manual tests. Once you define the parameters of the test, you can schedule those tests to run as often as you'd like, no more staring at your screen scratching your head. That consistency lends itself well to when you need to scale your testing. A manual tester may be able to vet a single application, but 100 applications, 1,000, not likely. The downside of automated tests is that they're often limited to how they're configured before the tests are actually executed. It can be very difficult to change the testing logic midstream, and good luck trying to automate tests that rely entirely on business logic…

Contents