Heuristic Security-Testing Methods