how we conduct security testing in realtime,for every
project we conduct security testig or not

Answer Posted / js_sabharwal

No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.

Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc

How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :

- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time

..etc

Is This Answer Correct ?    15 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

How can a LOG for testcases be maitained which can give information about a TestCase that is it new one or has been occured in previous versions of the software.

1610


Hi, Can anyone suggest a test case writing technique for the below scenario. 1. User draws a lines on the image 2. User selects the lines and right clicks ( Measuremnts like distance between the start and the end point, coordinates of start point and coordinates of end point) 3. User selects one of the measurement Measurement is displayed Just want to highlight, i am looking for a test case writing technique for above scenario.

1595


Negatives test cases of gmail login page With its severity , priority and expected results columns Through test case template-oodles technologies gurgoan

2191


When the GUI Testing will be held on the V model ?

1739


sanity testing is done during regression testing.is it true.if it is true plz explain?

1473






how to verify a button size (e.g Login Button) on a web page have same dimension prescribed by Client in UI Testing..??

1159


Anybody having documents and URLs about BFSI domain...Please share..it is really urgent

1973


HI. ANYONE HAS ATTENDED INTERVIEW FOR TESTING IN MINDKRAFT GLOBAL. I HAVE WRITTEN TEST FOR SOFTWARE TESTING. CAN ANYONE TELL ME WHAT ALL QUESTIONS CANBE ASKED. PLS REPLY. THANK YOU

2156


What are the different servers and difference between them?

1628


What is the negative testing and example

998


Can any one explain me about hybrid integration testing? and what is interface in integration testing? thanks in advance...... regards, MurthySharma.Manchella

1812


I am having 2 years of experience in Manual Testing, 2marrow I have an interview with a Company. Which type of questions they will ask me?How should I prepare for interview?Please guide me so that I will clear the interview.

1771


If we have no srs, brs but we have test cases does you execute the test cases blindly or do you follow any other process?

775


Write a set of test cases to test youtube?

7197


could u pls anyone tel me .."which is the best instute that provides eficient practical knowledge and also real-time oriented knowldge to do a project in manual and automation testing..in hyd" pls send me to dis mail-id if u find any..? sinducute17@gmail.com

1668