Comparing behavior between two versions (patched vs. unpatched) to confirm a vulnerability was fixed.