In the previous chapter, we looked at white box testing tips. In this chapter, we will learn about a common (but not a comprehensive) set of security testing tools. The major elements of a network that involve security testing include web and mobile connections, configuration, communication, third-party components, and sensitive information. We will look at the testing tips and tools for each element. Furthermore, we will also learn how these tools can be executed both automatically and as tools that are built into continuous integration.
We will cover the following topics in this chapter:
- General security testing toolkits
- Automation testing criteria
- Behavior-driven security testing frameworks
- Android security testing
- Secure infrastructure configuration
- Docker security scanning
- Integrated security tools