Skip to main content

Search...

Test Design Techniques: Black-Box Test Techniques at a Glance

From gut feeling to a selection you can defend: test design techniques make it traceable why exactly these test cases suffice and others may be left out.

Expert reviewed by Richard Seidl · Jul 31, 2026

What Are Test Design Techniques?

A test design technique (test technique for short) is a structured procedure for deriving concrete test conditions and test cases from the test basis, that is, from requirements, models, rules or experience. The path from requirements document to test case becomes traceable, repeatable and verifiable, instead of depending on the gut feeling of whoever happens to be testing.

Why the effort? Three reasons. A systematic derivation overlooks less, because the method forces you to touch every aspect of the test object at least once. It can be defended, to the product owner just as much as to an auditor. And it gives the team a shared vocabulary for agreeing on test scope without talking past each other.

What this feels like shows in every refinement session. A fare calculator in a rail booking app depends on four parameters, each with three values: ticket type, customer class, booking channel, day of travel, 81 combinations in total. Someone suggests testing “the most important cases”, and the team is already debating which ones those are. With pairwise testing, the debate becomes unnecessary: nine deliberately constructed test cases cover every pairing of two parameter values, and the selection is justified rather than negotiated.

Black-Box, White-Box and Experience-Based

Black-Box, White-Box and Experience-BasedComparison scheme of three test technique categories: black-box test techniques derive test cases from the specification and observable behaviour, the inner structure stays out of it. White-box techniques work with the code structure, statement and branch coverage for instance. Experience-based techniques use the knowledge and intuition of testers. An arrow points out that most of the eleven techniques presented are black-box techniques.Black-box Test Techniquesderives test cases from thespecification and observablebehaviour. The inner structurestays out of it.White-box Test Techniquesworks with the code structure,statement and branch coveragefor instance.Experience-basedTechniquesuses the knowledge and intuitionof testers.most of the eleven test designtechniques belong here

Swipe right or use the arrow keys to see the full graphic.

Test techniques can first be sorted into three categories. Black-box test techniques derive test cases from the specification and the observable behaviour; the inner structure of the system stays out of it. White-box techniques work the other way round, with the code structure, statement and branch coverage for instance. Experience-based techniques use the knowledge and intuition of testers to look precisely where structured test cases walk past.

Most techniques on this page are black-box test techniques: they need requirements, rules or models as a test basis, not source code. That is exactly why they work on every test level, from component testing to system testing, and why they can be prepared early, often before the first line of code exists. The experience-based techniques complement this structured core. They cannot replace it, and the reverse holds as well.

The sorting on this page follows a second, finer classification. It comes from the Advanced Level syllabus for the Test Analyst and groups the techniques by their starting point: data, behaviour, rules or experience. The two classifications do not contradict each other; they sit at right angles. Almost everything that follows is black-box in the sense of the first classification; what differs is the question of where the test cases come from.

A note for everyone heading toward a certification: of these techniques, the Foundation Level contains equivalence partitioning, boundary value analysis, decision table testing, state transition testing and checklist-based testing. Combinatorial testing, random testing, CRUD testing, scenario-based testing, metamorphic testing and crowd testing only appear in the Advanced Level Test Analyst.

The Four Groups of Techniques

The Four Groups of TechniquesMindmap of the four groups of test design techniques: data-based techniques (starting point: data) with equivalence partitioning, pairwise testing and random testing; behaviour-based techniques (starting point: behaviour) with CRUD testing, state transition testing and scenario-based testing; rule-based techniques (starting point: rules) with decision table testing and metamorphic testing; experience-based testing (starting point: experience) with session-based testing, experience-based checklists and crowd testing.Equivalence PartitioningPairwise TestingRandom TestingData-based Techniques(starting point: data)CRUD TestingState Transition TestingScenario-based TestingBehaviour-basedTechniques(starting point: behaviour)Session-based TestingExperience-based ChecklistsCrowd TestingExperience-based Testing(starting point: experience)Decision Table TestingMetamorphic TestingRule-based Techniques(starting point: rules)Test Design Techniques

Swipe right or use the arrow keys to see the full graphic.

Eleven techniques together cover almost every testing task. What sets them apart is their starting point: data, behaviour, rules or experience.

Data-based techniques

Here the input values are the starting point. Equivalence partitioning and boundary value analysis work as a pair and aim at the places where input defects actually sit: the partition boundaries with their off-by-one defects. Pairwise testing, the most common form of combinatorial testing, checks the interplay of several parameters with a fraction of the full combination. Random testing generates large volumes of inputs automatically and opens up input spaces where manual testing fails, in fuzz testing and property-based tests for example.

Behaviour-based techniques

Here sequences of actions take centre stage. CRUD testing walks through all data operations (create, read, update, delete) on all entities with all actors; its foundation is a CRUD matrix, which above all makes authorisation gaps visible. State transition testing works with formal state models and uncovers sequence and status defects, with clearly defined coverage measures. Scenario-based testing follows typical usage paths, from user story to multi-step business process, which makes it the technique closest to the user’s perspective.

Rule-based techniques

Here the logic of the test object is the starting point. Decision table testing writes business rules with several linked conditions down as a table: every column is a rule, every rule becomes a test case, no combination goes undiscussed. Metamorphic testing checks relations between inputs and outputs and therefore works even where nobody knows the correct result: search, recommendation systems, numerical algorithms and AI models.

Experience-based testing

Here what counts is what people see who have seen a lot. Session-based testing gives exploratory testing a frame: time-boxed sessions, a test charter as the assignment, a debriefing at the end. Experience-based checklists condense the knowledge from earlier releases and bug databases into a manageable number of focused checkpoints. Crowd testing spreads the testing across many parallel testers and delivers real diversity of devices, browsers and usage habits, paid for with lower reproducibility.

The Eleven Techniques Compared

The Eleven Techniques ComparedComparison table of the eleven test design techniques, pattern-coded by the four groups: equivalence partitioning, pairwise testing and random testing (data-based); CRUD testing, state transition testing and scenario-based testing (behaviour-based); decision table testing and metamorphic testing (rule-based); session-based testing, experience-based checklists and crowd testing (experience-based). For each technique the main use case and typical strength are given.Groupsdata-basedbehaviour-basedrule-basedexperience-basedTechniqueGroupMain use caseTypical strengthEquivalencePartitioningdata-basedinput validation with defined valuerangesfinds off-by-one defects atpartition boundariesPairwise Testingdata-basedseveral interacting parameterschecks parameter interactionswith few test casesRandom Testingdata-basedvery large input spaces,robustness, fuzz testinglarge-scale automationCRUD Testingbehaviour-baseddata-driven systems with entitiesand actorsuncovers authorisation gapssystematicallyState TransitionTestingbehaviour-basedsystems with a clearly definedlifecyclefinds sequence and statusdefects, measurable coverageScenario-basedTestingbehaviour-basedend-to-end tests, acceptancetests, business processesclosest to the user's perspectiveDecision Table Testingrule-basedbusiness rules with severalconditionsleaves no combination ofconditions undiscussedMetamorphic Testingrule-basedsystems with a test oracleproblem (search, AI, numerics)checks consistency where noexpected result existsSession-basedTestingexperience-basedexploratory investigation of newsoftwarefinds usability and perceptiondefectsExperience-basedChecklistsexperience-basedrecurring tasks such as smoketestspreserves experience in acheckable formCrowd Testingexperience-basedend-user software with highdevice diversityreal diversity of devices andusage habits

Swipe right or use the arrow keys to see the full graphic.

TechniqueGroupMain use caseTypical strength
Equivalence partitioning and boundary value analysisdata-basedinput validation with defined value rangesfinds off-by-one defects at partition boundaries
Pairwise testingdata-basedseveral interacting parameterschecks parameter interactions with few test cases
Random testingdata-basedvery large input spaces, robustness, fuzz testinglarge-scale automation
CRUD testingbehaviour-baseddata-driven systems with entities and actorsuncovers authorisation gaps systematically
State transition testingbehaviour-basedsystems with a clearly defined lifecyclefinds sequence and status defects, measurable coverage
Scenario-based testingbehaviour-basedend-to-end tests, acceptance tests, business processesclosest to the user’s perspective
Decision table testingrule-basedbusiness rules with several conditionsleaves no combination of conditions undiscussed
Metamorphic testingrule-basedsystems with a test oracle problem (search, AI, numerics)checks consistency where no expected result exists
Session-based testingexperience-basedexploratory investigation of new softwarefinds usability and perception defects
Experience-based checklistsexperience-basedrecurring tasks such as smoke testspreserves experience in a checkable form
Crowd testingexperience-basedend-user software with high device diversityreal diversity of devices and usage habits

How Do You Choose the Right Technique?

How Do You Choose the Right Technique?Decision tree with three guiding questions for choosing a technique. Question 1: Which risks and quality characteristics are at stake, with the branches high risks (several complementary techniques) and low risks (leaner, often experience-based testing). Question 2: What does the test object look like, with four branches: clearly defined value ranges lead to equivalence partitioning, linked business rules lead to a decision table, a defined lifecycle leads to state transition testing, hard-to-predict results with no expected-vs-actual comparison possible lead to metamorphic testing. Question 3: What do budget, tools and team experience allow, with the note that a technique without tool and team support remains theory.Question 1: Which risks and qualitycharacteristics are at stake?high risksseveral complementary techniqueslow risksleaner, often experience-basedtestingandQuestion 2: What does the test objectlook like?clearly defined valuerangesEquivalencePartitioninglinked business rulesDecision Table Testinga defined lifecycleState TransitionTestinghard-to-predict results, noexpected-vs-actualcomparison possibleMetamorphic TestingandQuestion 3: What do budget, tools andteam experience allow?without tool and team support, any technique remains theory

Swipe right or use the arrow keys to see the full graphic.

No single test technique does everything. Work exclusively with equivalence partitions and you miss state defects. Test only scenarios and you miss edge cases in the input values. Only explore and you miss systematic logic defects. An effective test approach emerges from deliberate combination, not from any one technique.

Three questions lead to the selection. The first: which risks and quality characteristics are at stake? High risks justify several complementary techniques, with overlapping coverage if need be; low risks tolerate leaner, often experience-based testing. The second: what does the test object look like? Clearly defined value ranges point to equivalence partitioning and boundary value analysis, linked business rules to a decision table, a defined lifecycle to state transition testing, results that are hard to predict to metamorphic testing. The third: what do budget, tools and team experience allow? A technique nobody masters and no tool supports remains theory, however well it fits.

As a repeatable procedure, per release for instance:

  1. Identify risks. Which product risks matter in this undertaking, at which risk level?
  2. Map quality characteristics. Which characteristics are affected, and how deeply?
  3. Derive candidate techniques. For each risk, determine the techniques that fit structurally.
  4. Assess effort and tooling. Which candidates are realistic to implement?
  5. Combine and record. Document the chosen combination, with its rationale, in the test approach.

Typical Mistakes in Selecting Techniques

Example Risk-Technique MatrixExample risk-technique matrix with four risks as rows (faulty input boundaries, contradictory business rules, wrong state transitions, missing device diversity) and four techniques as columns (equivalence partitioning, decision table testing, state transition testing, crowd testing). A checkmark marks which technique covers which risk. The last row missing device diversity has no checkmark in the first three columns, making visible which risk still stands there without a technique. The four risks named are illustrative examples, not a fixed list.EquivalencePartitioningDecision TableTestingState TransitionTestingCrowd Testingfaulty input boundariescontradictory business ruleswrong state transitionsmissing device diversityrisk without a matching techniqueThe four risks named are illustrative examples, not a fixed list.

Swipe right or use the arrow keys to see the full graphic.

Two opposite patterns keep showing up. The first: the favourite technique, applied to everything. Work on every task with the same tool and you produce blind spots exactly where the tool falls short. The second: trying to do everything at once. Run six techniques in parallel and none of them gets carried through cleanly. Three or four fitting techniques, applied consistently, beat half a dozen half-hearted ones.

An effective countermeasure is a simple risk-technique matrix: risks in the rows, chosen techniques in the columns. One glance shows which risk is covered by what, which risk still stands there without a technique, and which technique serves no risk at all. That last one is often a hint at effort nobody needs.

And the selection does not hold forever. Whether business rules, interfaces, security or device diversity dominate changes from release to release, and with them the fitting combination of techniques. Make the selection once and then extend it mechanically, and you lose exactly the adaptability that makes the techniques valuable.

Going Deeper

The five most important techniques are described here in detail: equivalence partitioning and boundary value analysis, pairwise testing, state transition testing, decision table testing and metamorphic testing. If you would rather listen than read: the podcast has conversations on test design methods and on test design with AI.

Frequently Asked Questions

A test design technique is a structured procedure for deriving test conditions and test cases from the test basis, meaning requirements, models, rules or experience. The path from document to test case becomes traceable, repeatable and verifiable. Well-known examples are equivalence partitioning, boundary value analysis, decision table testing and state transition testing.

A black-box test technique derives test cases from the specification or the observable behaviour, without knowledge of the inner structure of the test object. The code remains a black box. Typical representatives are equivalence partitioning, boundary value analysis, state transition testing, decision table testing and pairwise testing.

Test techniques can be sorted into four groups: data-based techniques (equivalence partitioning with boundary value analysis, combinatorial testing, random testing), behaviour-based techniques (CRUD testing, state transition testing, scenario-based testing), rule-based techniques (decision table testing, metamorphic testing) and experience-based testing (session-based testing, checklists, crowd testing). This four-group classification comes from the Advanced Level Test Analyst syllabus; the Foundation Level sorts techniques into three categories: black-box, white-box and experience-based.

Black-box techniques work with requirements and observable behaviour, without knowledge of the code. White-box techniques use the internal structure of the program, statements and branches for instance, as the basis for test cases and coverage measures. In practice they complement each other: black-box checks whether the system does the right thing, white-box whether the code has been exercised enough.

Three questions lead to the selection: Which risks and quality characteristics are at stake? What does the test object look like, and which test basis is available? What do budget, tools and team experience allow? High risks call for several complementary techniques, low risks tolerate leaner, often experience-based testing. No single technique does everything.

Three or four well-matched techniques are enough in most cases. More are rarely carried through cleanly in practice. More important than the number is the rationale: which risk is addressed by which technique? A simple risk-technique matrix makes that visible and uncovers gaps.

Build the base first

The deeper techniques on this page all rest on the same groundwork: equivalence partitioning, boundary values, decision tables, state transitions and a shared vocabulary. That base is exactly what you build in the ISTQB Foundation Level.