Software security testing has expanded beyond network scanning to include probing software behavior as critical for system security. As attacks grow more sophisticated, what vulnerabilities matter most is changing. Timing attacks, like race conditions, may allow access where other flaws do not.