OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Slow2Show (sl2shoyahoo.com)
Date: Tue Jan 15 2002 - 09:44:46 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    ('binary' encoding is not supported, stored as-is) In-Reply-To: <200201150644.BAA17049swiftsure.cnchost.com>

    >What is black box and white box testing; when is it
    appropriate to use one or the other;
    I always white box, unless the webapp source for
    some reason or another is not able to be white boxed

    >should you do both; what can you find with one that
    you can't find with another;
    When I test webapps I spend about 80% of the time
    white box and 20% black box testing and I always
    white box first. The black boxing at the end just gives
    you a different perspective on things, and after
    rigorously testing the source...then you have the "in
    the know" feeling that helps out very much when
    black boxing IMHO

    >is one more skilled; does one cost more to do; does
    one take longer; which one produces better results
    etc
    I usually spend more time(and there for $$) on white
    boxing....IMHO I think a combo of white/box is always
    needed

    -Slow2Show-
    University of Florida

    Disclaimer: I'm only a stupid college kid!!