The portion of security testing in which the advertised features of a system are tested for correct operation.