Covert testing for security (1)