5 docs tagged with "cobertura"

What the Manual covers, the declared gaps and what stays out of scope, from the coverage matrix of the Cybersecurity Act (CSA).

Testing with unexpected or malformed data to discover flaws in parsers, APIs and internal logic.

Technical and process indicators for assessing the coverage, traceability and effective validation of the security requirements applied by risk level, with mapping to the cross-cutting SbD-ToE governance dimensions.

Use of MITRE ATT&CK as the reference vocabulary for detection engineering — mapping of detections to adversarial techniques and tactics and measurement of coverage. ATT&CK is a shared vocabulary and a threat-informed reference, not a complete authority nor a checklist for total coverage.

Strategies for prioritising tests based on risk and ensuring effective coverage of the requirements.