Explain about Security Testing in webbased application?
- 2 Answers
- 7930 Views
- Crea, I also Faced
- E-Mail Answers
Answers were Sorted based on User's Feedback
Answer / ramyab.mca@gmail.com
Hai...
Security Testing:
Following are some test cases for web security testing:
Test by pasting internal url directly into browser address
bar without login. Internal pages should not open.
If you are logged in using username and password and
browsing internal pages then try changing url options
directly. I.e. If you are checking some publisher site
statistics with publisher site ID= 123. Try directly
changing the url site ID parameter to different site ID
which is not related to logged in user. Access should
denied for this user to view others stats.
Try some invalid inputs in input fields like login
username, password, input text boxes. Check the system
reaction on all invalid inputs.
Web directories or files should not be accessible directly
unless given download option.
Test the CAPTCHA for automates scripts logins.
Test if SSL is used for security measures. If used proper
message should get displayed when user switch from non-
secure http:// pages to secure https:// pages and vice
versa.
All transactions, error messages, security breach attempts
should get logged in log files somewhere on web server.
K,Byeee...
Thanks & Regards
B.Ramyasri
| Is This Answer Correct ? | 8 Yes | 2 No |
Answer / jyoti
Security Testing involves below points
1) Authorization Testing : Testing of different users
authority to view specific information.
i.e. Specific authority to enter in administration area
2) Access control testing : Access allocation to users
i.e. team members cannot access TL or PM data
PM can access TL's data.
| Is This Answer Correct ? | 6 Yes | 0 No |
Katari your questions was really helpful could you please send the questions and answers with them . Can anyone sends the top 30-40 question and answers for the interview purposes
say me 5 advantage of manaul over automation?
Gv example of a defect with high priority and low severity? Gv example of a defect with high severity and low priority?
How can it be known when to stop testing?
What is meant by resource allocation?(asked in interview for test lead)?
8 Answers Accenture, Acro Technologies,
How to test the below code and write test case? Prove that this code is wrong? int add(int a ,int b) {return a+b; }
how you will write test case for integration testing give me example
Anyone tell me the test cases of Shopping Favorite
What is Defect Acceptance ?
why do testing are divided into stages primarily becoz: 1) different stage has different purpose 2)Stages makes the testing simpler 3)Different test run in different environments 4)The no of stages the testing is easier Which is the option need to be chosen its urgent
What is scalability testing
8 Answers FSS, TCS, WebTekLabs,
what is data base testing, explain with example
Automation Testing 
