White Box Testing

A form of program testing that examines the input and output of a program without focusing on its internal logical structures.
[view]

A manual analysis technique that examines the program requirements, design, or code in a formal and disciplined manner to discover errors.
[view]

An analysis that examines an organization’s information resources, its existing controls, and its remaining organization and computer system vulnerabilities. It combines the loss potential for each resource or combination of resources with an estimated rate of occurrence to establish a potential level of damage in dollars or other assets. An element of risk management that includes analyzing an environment for risks, evaluating each risk as to its likelihood of occurring and cost of damage, assessing the cost of various countermeasures for each risk, and creating a cost/benefit report for safeguards to present to upper management. Examination of information to identify the risk to an information system.
[view]

Perimeter network segment that is logically between internal and external networks. Its purpose is to enforce the internal network’s IA policy for external information exchange and to provide external, untrusted sources with restricted access to releasable information while shielding the internal networks from outside attacks. A DMZ is also called a “screened subnet. ”
[view]

Network’s internal interface between the internal intercepting function and a mediation function.
[view]