Penetration Testing is one of the main method or tests for creating a secured data and information in an organization
You may be familiar with Penetration Testing. If not then please can go through what is Penetration testing?
Penetration testing which is categorized as follows
- BLACK BOX TESTING
- GREY BOX TESTING
- WHITE BOX TESTING
lets us see what Black Box, Grey Box, and White Box testing is?
- Black box testing is a methodology or a process in which tester has no idea about the systems that he is going to be tested and which type of information he will gather about the target network or system.
For example, in this testing, a tester only knows what should be the expected outcome and he does not know how the outcomes arrive. He does not examine any programming codes.
- Grey Box testing is a type of testing where a tester is provided with limited information about the internal details of the program of a system.
- White Box testing is a comprehensive testing where tester has been provided with a whole range of information about the systems and/or network such as Schema, Source code, OS details, IP address, etc. It is normally considered as a simulation of an attack by an internal source. It is also known as structural, glass box, clear box, and open box testing. White box penetration testing examines the code coverage and does data flow testing, path testing, loop testing, etc.
|BLACK BOX||GREY BOX||WHITE BOX|
|Source data Availability||No source data available||Few data are obtained||All data are given regarding with testing|
|Difficulty||Very difficult to conduct when compared with gray and white box||Difficult to conduct when compared with white box||Easy to conduct the test when compared with black and grey|
|Code language analysis||Need to Expertise||Need to analyze the language used||Understand the language used|
|Time consumption||More time consumption||Moderate and less when compared with black box testing||Less time consumption when compared to black and grey box test|
|Vulnerability analysis||Can detect major vulnerabilities when compared with grey and white||Can detect vulnerabilities according to organization requirements||Can detect according to organization requirement|
|Creativity ability||Need more creativity ability||Moderate creative when compared with black box||Less creativity ability when compared with black and grey box|
|Organizational Overview||Less Organization go for this testing||Less organization go for this testing||Most of the organization go for this testing|
Difference between Black Box testing, Grey box testing and White box testing
You may now know what are the types of Penetration testing but do you know on which all areas these testings are used? You can read Different areas of Penetration testing to understand more information