Black Box, White Box or Glass Box Testing: What's in a Name?

For years, security researchers have used the terms "black box" and "white box" to describe dynamic and static web application security analysis, respectively. IBM is now seeking to combine the best of both approaches by introducing a new approach called "Glass Box."
"We use the terms 'black box' and 'dynamic analysis' interchangeably, and basically that's looking at a functioning application in a web browser and evaluating its state to identify potential vulnerabilities," Patrick Vandenberg, program director for IBM Security, told