Plan Security Testing Early, Integrate It Systematically, and Implement It Effectively
The Challenge
The security requirements for modern IT systems are continuously increasing and cannot be met by constructive measures alone. A large proportion of known security incidents arise because vulnerabilities are identified too late or insufficiently tested.
In practice, it becomes apparent that security testing is often carried out only sporadically—such as through individual tests shortly before commissioning. Earlier phases of the software lifecycle, such as requirements specification or design, are often neglected. At the same time, many teams lack guidance on which security tests are useful in which phase and how these tests can be integrated into existing development and testing processes.
The result: security gaps become visible late, remediation measures are labor-intensive, and the effectiveness of security activities is difficult to understand.
The Solution
The course “Security Tests Throughout the Entire Software Lifecycle” demonstrates how security testing can be systematically and practically integrated into all phases of the software lifecycle—from requirements specification and design to implementation, system testing, acceptance testing, and maintenance.
Participants learn fundamental security testing methods and how to select and apply them appropriately for each phase. A particular focus is placed on deriving security testing objectives, planning tests effectively, and identifying security vulnerabilities early and transparently.
Fraunhofer Institute for Open Communication Systems