{"id":4774,"date":"2022-05-25T21:28:25","date_gmt":"2022-05-25T19:28:25","guid":{"rendered":"https:\/\/www.sec4you.com\/?p=4774"},"modified":"2022-11-06T09:38:15","modified_gmt":"2022-11-06T08:38:15","slug":"comparison-blackbox-test-whitebox-test-graybox-test","status":"publish","type":"post","link":"https:\/\/www.sec4you.com\/en\/comparison-blackbox-test-whitebox-test-graybox-test\/","title":{"rendered":"Com\u00adpa\u00adri\u00adson: Black\u00adbox Test, White\u00adbox Test, Gray\u00adbox Test"},"content":{"rendered":"

Befo\u00adre per\u00adforming a pene\u00adtra\u00adti\u00adon test, the ques\u00adti\u00adon ari\u00adses as to how the pen\u00adtest should be per\u00adfor\u00admed. Here, pen\u00adtes\u00adters distin\u00adgu\u00adish bet\u00adween the fol\u00adlo\u00adwing approaches:<\/p>\n

    \n
  1. Black\u00adbox test<\/li>\n
  2. White\u00adbox test<\/li>\n
  3. Gray\u00adbox Text<\/li>\n<\/ol>\n

    Which test is best sui\u00adted for an audit?<\/p>\n<\/div>

    Black box or black box test<\/h3><\/h1><\/div>

    With this pene\u00adtra\u00adti\u00adon test method, the pen\u00adtes\u00adter does not recei\u00adve any infor\u00adma\u00adti\u00adon about the sys\u00adtems in ope\u00adra\u00adti\u00adon, neither which fire\u00adwall is in use nor which exter\u00adnal ser\u00advices the com\u00adpa\u00adny uses. The\u00adr\u00ade\u00adfo\u00adre, the pen\u00adtes\u00adter has to spend more time on rese\u00adarch. For this pur\u00adpo\u00adse, pen\u00adtes\u00adters also use back\u00adground infor\u00adma\u00adti\u00adon about the com\u00adpa\u00adny from the dark\u00adnet and spe\u00adcial search engi\u00adnes such as Shodan.<\/p>\n

    Cus\u00adto\u00admers like to use this test\u00ading approach to find out what infor\u00adma\u00adti\u00adon real hackers can find out about the com\u00adpa\u00adny. For lia\u00adbi\u00adli\u00adty reasons, howe\u00adver, the cus\u00adto\u00admer must always dis\u00adc\u00adlo\u00adse the actu\u00adal IP<\/span> addres\u00adses of its infra\u00adstruc\u00adtu\u00adre, and aut\u00adho\u00adri\u00adze the audit com\u00adpa\u00adny with a decla\u00adra\u00adti\u00adon of aut\u00adho\u00adriza\u00adti\u00adon for the pen\u00adtest attack.<\/p>\n

    The advan\u00adta\u00adges:<\/p>\n<\/div>

    • <\/i><\/span>
      \n

      Cus\u00adto\u00admers learn what infor\u00adma\u00adti\u00adon Inter\u00adnet and dark\u00adnet are stored about the company<\/p>\n<\/div><\/li>

    • <\/i><\/span>
      \n

      The time requi\u00adred for the cus\u00adto\u00admer to pro\u00advi\u00adde infor\u00adma\u00adti\u00adon and coor\u00addi\u00adna\u00adti\u00adon is minimal<\/p>\n<\/div><\/li>

    • <\/i><\/span>
      \n

      The result report is from the point of view of a hacker<\/p>\n<\/div><\/li><\/ul>

      Dis\u00adad\u00advan\u00adta\u00adges and the cost factor:<\/p>\n<\/div>

      • <\/i><\/span>
        \n

        Due to the lack of coor\u00addi\u00adna\u00adti\u00adon, the\u00adre is no prio\u00adri\u00adtiza\u00adti\u00adon of which ser\u00advices are par\u00adti\u00adcu\u00adlar\u00adly cri\u00adti\u00adcal and requi\u00adre more or less test\u00ading effort<\/p>\n<\/div><\/li>

      • <\/i><\/span>
        \n

        The rese\u00adarch is time-con\u00adsum\u00ading and the\u00adr\u00ade\u00adfo\u00adre a black box test is more expen\u00adsi\u00adve than a white or gray box test<\/p>\n<\/div><\/li>

      • <\/i><\/span>
        \n
        \n

        The black box test is not sui\u00adta\u00adble for test\u00ading inter\u00adnal secu\u00adri\u00adty-rele\u00advant algo\u00adrith\u00adms of the applications.<\/p>\n<\/div>\n<\/div><\/li><\/ul><\/div><\/div>

        White box or white box test<\/h3><\/h1><\/div>

        During the white\u00adbox test, the\u00adre is an inten\u00adsi\u00adve exch\u00adan\u00adge of infor\u00adma\u00adti\u00adon bet\u00adween the ope\u00adra\u00adtor and the pen\u00adtes\u00adter about the IT<\/span> infra\u00adstruc\u00adtu\u00adre used, the secu\u00adri\u00adty infra\u00adstruc\u00adtu\u00adre, the IT<\/span> ser\u00advices and authen\u00adti\u00adca\u00adti\u00adon methods. Often, pro\u00adtec\u00adti\u00adve mea\u00adsu\u00adres such as fire\u00adwall IPS<\/span> are dis\u00adab\u00adled in advan\u00adce to allow the secu\u00adri\u00adty scan to run effi\u00adci\u00adent\u00adly. To test web appli\u00adca\u00adti\u00adons, the pen\u00adtes\u00adter often also recei\u00adves dif\u00adfe\u00adrent acti\u00adve user IDs to run within a web appli\u00adca\u00adti\u00adon, for exam\u00adp\u00adle, the OWASP<\/span> Top 10 attacks. Often the pen\u00adtes\u00adter also gets insight into source code or inter\u00adnal configurations.<\/p>\n

        This test\u00ading approach is very effi\u00adci\u00adent! The pen\u00adtes\u00adter actively com\u00admu\u00adni\u00adca\u00adtes with the cus\u00adto\u00admer and tests the IT<\/span> ser\u00advices and appli\u00adca\u00adti\u00adons in gre\u00adat depth. The results can go as far as recom\u00admen\u00adda\u00adti\u00adons for the soft\u00adware deve\u00adlo\u00adpers, as log\u00adin func\u00adtions, authen\u00adti\u00adca\u00adti\u00adon and under\u00adly\u00ading algo\u00adrith\u00adms are also dis\u00adcus\u00adsed. By sha\u00adring infor\u00adma\u00adti\u00adon about the infra\u00adstruc\u00adtu\u00adre, the pen\u00adtes\u00adter can make struc\u00adtu\u00adral recom\u00admen\u00adda\u00adti\u00adons about net\u00adwork design and secu\u00adri\u00adty infra\u00adstruc\u00adtu\u00adre, which is often not pos\u00adsi\u00adble with a black box test.<\/p>\n

        Many advan\u00adta\u00adges:<\/p>\n<\/div>

        • <\/i><\/span>
          Cus\u00adto\u00admers can prio\u00adri\u00adti\u00adze IT<\/span> ser\u00advices and com\u00admu\u00adni\u00adca\u00adte with the pen\u00adtes\u00adter in advance<\/div><\/li>
        • <\/i><\/span>
          White\u00adbox tests are more effi\u00adci\u00adent and cost-effec\u00adti\u00adve than black\u00adbox tests in terms of pen\u00adtest results<\/div><\/li>
        • <\/i><\/span>
          Cus\u00adto\u00admers recei\u00adve soft\u00adware deve\u00adlo\u00adp\u00adment recom\u00admen\u00adda\u00adti\u00adons on secu\u00adre coding and secu\u00adre design<\/div><\/li>
        • <\/i><\/span>
          The pen\u00adtes\u00adter can make recom\u00admen\u00adda\u00adti\u00adons on the net\u00adwork archi\u00adtec\u00adtu\u00adre and the 3\u2011tier appli\u00adca\u00adti\u00adon architecture<\/div><\/li>
        • <\/i><\/span>
          \n

          Through the exch\u00adan\u00adge of infor\u00adma\u00adti\u00adon bet\u00adween the cus\u00adto\u00admer and the pen\u00adtes\u00adter, inter\u00adnal algo\u00adrith\u00adms and APIs can also be eva\u00adlua\u00adted in the results report.<\/p>\n<\/div><\/li>

        • <\/i><\/span>
          \n

          Cus\u00adto\u00admers learn more about the pen\u00adtes\u00adter\u00ad\u2019s attacks in advan\u00adce and can bet\u00adter moni\u00adtor their services.<\/p>\n<\/div><\/li><\/ul>

          Also dis\u00adad\u00advan\u00adta\u00adges:<\/p>\n<\/div>

          • <\/i><\/span>
            The coor\u00addi\u00adna\u00adti\u00adon effort is grea\u00adter (a few hours, up to 1\u20132 days)<\/div><\/li>
          • <\/i><\/span>
            Cus\u00adto\u00admers need a detail\u00aded net\u00adwork plan and IT<\/span> asset direc\u00adto\u00adry, and they need to know exact\u00adly what the con\u00adfi\u00adgu\u00adra\u00adti\u00adons of the sys\u00adtems are.<\/div><\/li>
          • <\/i><\/span>
            Often this con\u00adfi\u00adden\u00adti\u00adal infor\u00adma\u00adti\u00adon is not rea\u00addi\u00adly shared externally<\/div><\/li><\/ul><\/div><\/div>

            Gray\u00adbox \/ Gray-Box Test<\/h3><\/h1><\/div>

            In this mixed form bet\u00adween white-box and black-box test\u00ading, par\u00adti\u00adal know\u00adledge about inter\u00adnal infra\u00adstruc\u00adtures is exch\u00adan\u00adged. This includes at least the rele\u00advan\u00adce of the published services.<\/p>\n

            The advan\u00adta\u00adges are obvious:<\/p>\n<\/div><\/div><\/div>

            • <\/i><\/span>
              The pen\u00adtes\u00adter nevert\u00adhel\u00adess crea\u00adtes a com\u00adple\u00adte inven\u00adto\u00adry of exter\u00adnal ser\u00advices, but focu\u00adses pene\u00adtra\u00adti\u00adon test\u00ading on cri\u00adti\u00adcal ser\u00advices with sen\u00adsi\u00adti\u00adve data<\/div><\/li>
            • <\/i><\/span>
              With the know\u00adledge of the infra\u00adstruc\u00adtu\u00adre and secu\u00adri\u00adty infra\u00adstruc\u00adtu\u00adre, the audi\u00adtor can make spe\u00adci\u00adfic recom\u00admen\u00adda\u00adti\u00adons on the architecture<\/div><\/li>
            • <\/i><\/span>
              The test pha\u00adse is signi\u00adfi\u00adcant\u00adly shor\u00adten\u00aded com\u00adpared to a black box test<\/div><\/li>
            • <\/i><\/span>
              Inva\u00adsi\u00adve test methods that dis\u00adrupt or block ser\u00advices (e.g. DoS attacks) can be eva\u00adlua\u00adted in advance<\/div><\/li><\/ul>

              The dis\u00adad\u00advan\u00adta\u00adges:<\/p>\n<\/div><\/div><\/div>

              <\/span><\/div><\/div><\/div>
              • <\/i><\/span>
                Over\u00adco\u00adming the first peri\u00adme\u00adter takes lon\u00adger, so the\u00adre is less time to inten\u00adsi\u00adve\u00adly test sys\u00adtems behind it<\/div><\/li>
              • <\/i><\/span>
                Gray\u00adbox tests pro\u00addu\u00adce fewer results and recom\u00admen\u00adda\u00adti\u00adons when mea\u00adsu\u00adred over the same time as white\u00adbox tests<\/div><\/li>
              • <\/i><\/span>
                \n

                Gray\u00adbox tests can only be used to test inter\u00adnal algo\u00adrith\u00adms bet\u00adween sys\u00adtems (e.g. inter\u00adnal APIs, inter\u00adnal cryp\u00adto\u00adgra\u00adphy usa\u00adge, backend com\u00admu\u00adni\u00adca\u00adti\u00adon with third par\u00adty sys\u00adtems) to a limi\u00adt\u00aded extent<\/p>\n<\/div><\/li><\/ul><\/div><\/div>

                What does a pen\u00adtest cost?<\/h3><\/h1><\/div>

                The cost of a pene\u00adtra\u00adti\u00adon test also results from the time spent on the fol\u00adlo\u00adwing services:<\/p>\n<\/div>

                  \n
                1. The pre\u00adpa\u00adra\u00adti\u00adon time and arran\u00adge\u00adments with the customer.<\/li>\n
                2. The set\u00adup of the secu\u00adri\u00adty scan\u00adner and the auto\u00adma\u00adted scan\u00adning tools<\/li>\n
                3. The time for the manu\u00adal pene\u00adtra\u00adti\u00adon tests into the cus\u00adto\u00admer\u2019s sys\u00adtems by the pentester<\/li>\n
                4. The report pre\u00adpa\u00adra\u00adti\u00adon and coor\u00addi\u00adna\u00adti\u00adon of the draft report<\/li>\n
                5. The final presentation<\/li>\n<\/ol>\n<\/div>

                  Small pen\u00adtest pro\u00adjects<\/strong> can alre\u00ada\u00addy be offe\u00adred with an effort of 2\u20133 days due to the high degree of auto\u00adma\u00adti\u00adon of pha\u00adse 2. For black box tests, addi\u00adtio\u00adnal hours or days are nee\u00added for rese\u00adarch. The tur\u00adn\u00adaround time is usual\u00adly around 1 week.<\/p>\n<\/div>

                  For medi\u00adum-sized pro\u00adjects<\/strong> or more deman\u00adding IT<\/span> ser\u00advices, 5\u20137 days or more should be inves\u00adted in the pen\u00adtest. The secu\u00adri\u00adty scan includes, among other things, an extern\u00adal\u00adly crea\u00adted ser\u00advice inven\u00adto\u00adry and can run for many days if the\u00adre are a lar\u00adge num\u00adber of IP<\/span> addres\u00adses. During this time, the pen\u00adtes\u00adter moni\u00adtors the scan\u00adner, but the\u00adre is usual\u00adly no work time invol\u00adved. The working time is focu\u00adsed exclu\u00adsi\u00adve\u00adly on pha\u00adse 1, 3, 4 and 5.<\/p>\n<\/div>

                  Lar\u00adge pen\u00adtest pro\u00adjects<\/strong> with a lar\u00adge num\u00adber of IP<\/span> addres\u00adses or the test\u00ading of very deman\u00adding web appli\u00adca\u00adti\u00adons can also take 10+ days. If you sche\u00addu\u00adle or invest too few days for the pen\u00adtest, the\u00adre is a risk that the pen\u00adtes\u00adter will not be able to iden\u00adti\u00adfy rele\u00advant vul\u00adnerabi\u00adli\u00adties in the given time and the test will be incom\u00adple\u00adte as a result. For lar\u00adge pen\u00adtests, the tur\u00adn\u00adaround time can also be 3\u20134 weeks.<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":4443,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[42,212],"tags":[],"class_list":["post-4774","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-blog-en"],"acf":[],"yoast_head":"\nComparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Comparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/\" \/>\n<meta property=\"og:site_name\" content=\"SEC4YOU\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-25T19:28:25+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-11-06T08:38:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png\" \/>\n\t<meta property=\"og:image:width\" content=\"848\" \/>\n\t<meta property=\"og:image:height\" content=\"565\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Andreas Schuster\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andreas Schuster\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/\"},\"author\":{\"name\":\"Andreas Schuster\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/#\\\/schema\\\/person\\\/b14cd48925626f5f693479b828fbc025\"},\"headline\":\"Com\u00adpa\u00adri\u00adson: Black\u00adbox Test, White\u00adbox Test, Gray\u00adbox Test\",\"datePublished\":\"2022-05-25T19:28:25+00:00\",\"dateModified\":\"2022-11-06T08:38:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/\"},\"wordCount\":5253,\"image\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.sec4you.com\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Black-White-Graybox-Tests.png\",\"articleSection\":[\"Blog\",\"Blog EN\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/\",\"url\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/\",\"name\":\"Comparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.sec4you.com\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Black-White-Graybox-Tests.png\",\"datePublished\":\"2022-05-25T19:28:25+00:00\",\"dateModified\":\"2022-11-06T08:38:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/#\\\/schema\\\/person\\\/b14cd48925626f5f693479b828fbc025\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.sec4you.com\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Black-White-Graybox-Tests.png\",\"contentUrl\":\"https:\\\/\\\/www.sec4you.com\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/Black-White-Graybox-Tests.png\",\"width\":848,\"height\":565,\"caption\":\"Black-White-Graybox Tests\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/comparison-blackbox-test-whitebox-test-graybox-test\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.sec4you.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Comparison: Blackbox Test, Whitebox Test, Graybox Test\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/#website\",\"url\":\"https:\\\/\\\/www.sec4you.com\\\/\",\"name\":\"SEC4YOU\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.sec4you.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.sec4you.com\\\/#\\\/schema\\\/person\\\/b14cd48925626f5f693479b828fbc025\",\"name\":\"Andreas Schuster\",\"description\":\"Als Experte f\u00fcr Informationssicherheit \\\/ Informationssicherheits-Managementsysteme (ISMS), IT-Sicherheit, Authentifizierung, sowie PKI und Verschl\u00fcsselung verf\u00fcgt er \u00fcber mehr als 20 Jahre technische Erfahrung in Serverinfrastruktur sowie Unternehmensnetzwerkarchitektur. Seine ausgezeichneten Kenntnisse in ISO 27001 und ISA 6 \\\/ TISAX erm\u00f6glichen es ihm, Kunden in NIS-2 Umsetzungen und bei InfoSec Zertifizierungsprozessen effektiv zu unterst\u00fctzen. Zudem ist er hervorragend mit europ\u00e4ischen Zertifizierungsstellen vernetzt.\",\"sameAs\":[\"https:\\\/\\\/Verschl\u00fcsselt.IT\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/andreas-schuster-3885b18\\\/\"],\"url\":\"https:\\\/\\\/www.sec4you.com\\\/en\\\/author\\\/aschuster4you\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Comparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/","og_locale":"en_US","og_type":"article","og_title":"Comparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU","og_url":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/","og_site_name":"SEC4YOU","article_published_time":"2022-05-25T19:28:25+00:00","article_modified_time":"2022-11-06T08:38:15+00:00","og_image":[{"width":848,"height":565,"url":"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png","type":"image\/png"}],"author":"Andreas Schuster","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Andreas Schuster","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#article","isPartOf":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/"},"author":{"name":"Andreas Schuster","@id":"https:\/\/www.sec4you.com\/#\/schema\/person\/b14cd48925626f5f693479b828fbc025"},"headline":"Com\u00adpa\u00adri\u00adson: Black\u00adbox Test, White\u00adbox Test, Gray\u00adbox Test","datePublished":"2022-05-25T19:28:25+00:00","dateModified":"2022-11-06T08:38:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/"},"wordCount":5253,"image":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png","articleSection":["Blog","Blog EN"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/","url":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/","name":"Comparison: Blackbox Test, Whitebox Test, Graybox Test - SEC4YOU","isPartOf":{"@id":"https:\/\/www.sec4you.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#primaryimage"},"image":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png","datePublished":"2022-05-25T19:28:25+00:00","dateModified":"2022-11-06T08:38:15+00:00","author":{"@id":"https:\/\/www.sec4you.com\/#\/schema\/person\/b14cd48925626f5f693479b828fbc025"},"breadcrumb":{"@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#primaryimage","url":"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png","contentUrl":"https:\/\/www.sec4you.com\/wp-content\/uploads\/2022\/05\/Black-White-Graybox-Tests.png","width":848,"height":565,"caption":"Black-White-Graybox Tests"},{"@type":"BreadcrumbList","@id":"https:\/\/www.sec4you.com\/comparison-blackbox-test-whitebox-test-graybox-test\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.sec4you.com\/en\/"},{"@type":"ListItem","position":2,"name":"Comparison: Blackbox Test, Whitebox Test, Graybox Test"}]},{"@type":"WebSite","@id":"https:\/\/www.sec4you.com\/#website","url":"https:\/\/www.sec4you.com\/","name":"SEC4YOU","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sec4you.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.sec4you.com\/#\/schema\/person\/b14cd48925626f5f693479b828fbc025","name":"Andreas Schuster","description":"Als Experte f\u00fcr Informationssicherheit \/ Informationssicherheits-Managementsysteme (ISMS), IT-Sicherheit, Authentifizierung, sowie PKI und Verschl\u00fcsselung verf\u00fcgt er \u00fcber mehr als 20 Jahre technische Erfahrung in Serverinfrastruktur sowie Unternehmensnetzwerkarchitektur. Seine ausgezeichneten Kenntnisse in ISO 27001 und ISA 6 \/ TISAX erm\u00f6glichen es ihm, Kunden in NIS-2 Umsetzungen und bei InfoSec Zertifizierungsprozessen effektiv zu unterst\u00fctzen. Zudem ist er hervorragend mit europ\u00e4ischen Zertifizierungsstellen vernetzt.","sameAs":["https:\/\/Verschl\u00fcsselt.IT","https:\/\/www.linkedin.com\/in\/andreas-schuster-3885b18\/"],"url":"https:\/\/www.sec4you.com\/en\/author\/aschuster4you\/"}]}},"_links":{"self":[{"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/posts\/4774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/comments?post=4774"}],"version-history":[{"count":2,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/posts\/4774\/revisions"}],"predecessor-version":[{"id":4776,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/posts\/4774\/revisions\/4776"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/media\/4443"}],"wp:attachment":[{"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/media?parent=4774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/categories?post=4774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sec4you.com\/en\/wp-json\/wp\/v2\/tags?post=4774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}