Written in a simple, general terms, Testing Security Code is a consolidation of resources designed to teach beginning and intermediate testers the software security concepts needed to conduct tests that are relevant and effective. Answering a question relating to all testing procedures, the book considers the differences in process between security testing and functional testing, security testing plan, the benefits and pitfalls threat-modeling, and identification of root vulnerability problems and how to test for them. The book begins with coverage of basic concepts, security planning process, and pass the test. Provides practical guidance on how to perform the tasks of software security testing, Testing Code Security gives readers the knowledge needed to begin testing software security for each project and become an integral part in the drive to produce software better security and safety.