Quality assurance and testing organizations are tasked with the broad objective of assuring that a software application fulfills its functional business requirements. Such testing most often involves running a series of dynamic functional tests, to ensure proper implementation of the application?s features. However, because security is not a feature or even a set of features, security testing doesn't directly fit into this paradigm.