Look into the evolving field of blackbox testing using fuzzing technology, from a field of home-grown hacker tools to commercial-grade testing products which automate the process of QA security. You will see where this field is headed and how compliance and certification are introduced to software security using this technology.