for more complex problems, than other, less sophisticated (and less
costly) black box security tests, such as fault injection, fuzzing, and
vulnerability scanning. The penetration tester acts, in essence, as an
“ethical hacker.” As with network penetration testing, the effectiveness