In this article, author Alan Cao discusses the modeling aspect of XBOSoft’s Modeling, Planning, Execution, and Analysis (MPEA) approach and explains how to best model software security testing.

Whether you do manual penetration testing or dynamic security testing, the overall goal is to reduce vulnerability-associated risks. “Just like in black-box functional testing, we need to find the most important defects as soon as possible.” claims Alan. This article presents a security testing modeling framework for executing security testing projects with stringent time constraints.

http://pentestmag.com/third-issue-of-webapppentesting-is-out/