白盒/黑盒测试：静态还是动态？
我的理解是：
动态测试是在系统运行时进行的测试。 静态测试是在系统未运行时进行的。
黑盒测试侧重于功能，并且在不了解程序内部工作原理的情况下进行。 白盒测试寻找代码本身的问题。
我想知道的是， 可以说所有黑盒测试都是静态的吗？ 是否可以公平地说，一些白盒测试是静态的（例如，检查源代码）而一些是动态的（分支/路径测试）？
Here is what I understand:
Dynamic testing is testing that is performed when the system is running.
Static testing is performed when the system is not running.
Black-Box testing focuses on functionality and is performed without knowing the internal workings of the program.
White-Box testing looks for problems within the code itself.
What I am wondering is,
Is it fair to say that all Black-Box testing is static?
Is it also fair to say that some White-Box testing is static (for example, inspection of source code) and some is dynamic (branch/path testing)?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（6）
不会。黑盒测试通常是动态的。事实上，当我们想到软件测试时，我们通常会想到人们运行代码并记录他们发现的问题。这是经典的动态黑盒测试。
然而，存在黑盒静态测试。当您检查规范或要求以查找错误时，这是静态的黑盒测试。这里有一些技巧
像客户一样阅读规范 - 有什么没有意义吗？
将规范与行业或公司指南进行比较 - 是否存在违规行为？
阅读要求，确保每一项都满足：
正确
可行
必要
优先
明确
可修改
完整
可验证
如果违反其中任何一个，您就会发现需求错误并保存大量的时间和金钱。
No. Black-box testing is usually dynamic. In fact, when we think of software testing we usually think of people running the code and recording problems they find. This is classic dynamic black-box testing.
However, there is black-box static testing. When you examine the spec or requirements looking for errors, this is static, black-box testing. Here are some techniques
Read the spec as if you're the customer - anything not make sense?
Compare the spec to industry or company guidelines - any violations?
Read the requirements to make sure each one is:
Correct
Feasible
Necessary
Prioritized
Unambiguous
Modifiable
Complete
Verifiable
If any of those are violated, you've found a requirements error and saved loads of time and money.
我想不出黑盒测试是静态的任何情况。
黑盒/白盒是指测试人员对被测系统 (SUT) 内部工作原理的了解。
静态/动态是指被测系统的状态（运行/动态，或停止/静态）。
黑盒测试探测正在运行的系统的外部，而不了解其内部实现。许多功能测试都属于这一类。我不确定黑盒如何在不加载系统并查看它如何响应各种刺激的情况下做到这一点。
白盒测试可以动态进行（例如，安全测试人员了解执行渗透测试的系统的内部工作原理），也可以静态进行，例如运行 AppScan、FxCop、JavaCop 等工具来查找准则违规和潜在安全性源代码中的漏洞。
I can't think of any situation in which black-box testing is static.
Black-box/White-box refers to the tester's knowledge of the inner workings of the system under test (SUT).
Static/Dynamic refers to the state of system under test (running/dynamic, or stopped/static).
Black-box testing probes the outside of a running system without any knowledge of its internal implementation. A lot of functional testing falls into this category. I'm not sure how black-box would do this without loading up the system and seeing how it responds to various stimuli.
White-box testing can be done dynamically (for example, security testers with knowledge of the internal workings of the system performing penetration testing) or statically, such as running tools like AppScan, FxCop, JavaCop, etc. looking for guideline violations and potential security vulnerabilities in the source code.
可以说所有黑盒测试都是静态的吗？
黑盒测试可以是静态的，也可以是动态的。
静态黑盒测试 - 审查需求文档、规范文档或设计文档。
动态黑盒测试 - 通过提供各种输入、执行各种操作来对被测应用程序进行测试。
Is it fair to say that all Black-Box testing is static?
Black Box Testing can be static as well as Dynamic.
Static Black Box Testing- Reviews of Requirement documents, Specification documents or Design documents.
Dynamic Black Box Testing-The testing doe on Application under test by providing various inputs, Performing various actions.
在静态测试下，代码不会被执行。相反，它手动检查代码、需求文档和设计文档以查找错误。因此，名称为“静态”。
在动态测试下执行代码。它检查软件系统的功能行为、内存/CPU 使用情况以及系统的整体性能。因此得名“动态”。
黑盒测试是一种忽略系统内部机制并关注系统任何输入和执行所生成的输出的测试技术。
白盒测试是一种考虑系统内部机制的测试技术。
黑盒测试和白盒测试是用于软件测试的测试方法。动态测试可以是黑盒测试或白盒测试。
前任：
单元测试是动态测试（功能测试类型）的一种，属于白盒测试类别。
系统测试是动态测试（功能测试类型）的一种，属于黑盒测试类别。
集成测试是动态测试的一种（功能测试类型），它可能同时属于白盒测试和黑盒测试。
看到这个： https:// /www.codeproject.com/Tips/351122/What-is-software-testing-What-are-the- Different-ty
Under Static Testing code is not executed. Rather it manually checks the code, requirement documents, and design documents to find errors. Hence, the name "static".
Under Dynamic Testing code is executed. It checks for functional behavior of software system , memory/cpu usage and overall performance of the system. Hence the name "Dynamic".
Black box testing is a testing technique that ignores the internal mechanism of the system and focuses on the output generated against any input and execution of the system.
White box testing is a testing technique that takes into account the internal mechanism of a system.
Black box testing and White box testing are testing methods used for software testing.Dynamic testing can be black box or white box testing.
Ex:
Unit testing is a type of dynamic testing(Functional testing type) and it falls under the class of white box testing.
System testing is a type of dynamic testing(Functional testing type) and it falls under the class of black box testing.
Integration testing is a type of dynamic testing(Functional testing type) and it may falls both white box testing and black box testing.
see this: https://www.codeproject.com/Tips/351122/What-is-software-testing-What-are-the-different-ty
一些黑盒测试是动态的，因为您可以在系统运行时测试系统，而无需了解其内部结构（例如，当使用最终用户界面或公共 API 时）。
Some black-box testing is dynamic, as you can test a system while it is running without any knowledge of its internals (e.g., when using the end-user interface or public API).
它是一个层次结构，
顶部有白盒和黑盒测试
白盒测试分为CFA和DFA
DFA 代表数据流分析，分为静态 DFA 和动态 DFA
Its a Hierarchy
theres white box and black box testing at the top
the white box testing divides into CFA and DFA
DFA stands for Data flow analysis which breaks down to Static DFA and Dynamic DFA