all tools,it is up to the tester to interpret the results to determine whether
each finding is,in fact,indicative of a real vulnerability.
5.5.2.1 “White Box” Techniques “White box” tests and analyses, by contrast with “black box” tests and
analyses, are performed on the source code. Specific types of white box