In this chapter, we will discuss the challenges of cross-team communication within a large software development team. The team who executed the security testing may understand what has been tested and how, but other non-technical teams such as product management, marketing, or even customers may not understand the context just from reading the testing reports. Therefore, we will introduce behavior-driven development (BDD) acceptance testing with automation security testing. BDD security testing is introduced to improve the communication of the nature of security testing to all functional teams involved. We will use security testing tools on top of the BDD security automation testing framework and hook into the testing process.
The following topics are to be covered in this chapter:
- Security testing communication
- Overview of BDD security testing...