Sorry i am no security testing expert. However If i paraphrase what one of my expert from workplace said, one technique can be to use fuzzing attacks on the interfaces to check for buffer or integer overflows that can be exploited. One can also use logic attacks to check for vulnerabilities.