how we conduct security testing in realtime,for every
project we conduct security testig or not
Answer / js_sabharwal
No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.
Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc
How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :
- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time
..etc
| Is This Answer Correct ? | 15 Yes | 1 No |
what is the difference between quality assurence and quality control
Hi, Anybody can explain me What is the Difference between 2- tier and 3-tier Architecture.
What are the basic forms of variations?
wht is the diff b/w funtional testing and integration testing
1. Hai, if we are not having any SRS,BRS docs., how can we prepare the test cases & how can we test the application ? 2. In this, is it possible to make 100% bug free.
Why are initial and end conditions necessary?
It is not waste of time in preparing the test condition,testcase and testscript
What is the difference between volume and load?
what is pareto analysis?
Explain unit testing, integration tests, system testing and acceptance testing?
What is the difference between windows application and Client server application ?
on what basis a tester writes test cases,i mean is it only based on FS and if so how can they know that a certain no of test cases can be written even b4 they write the test cases.bcoz a test plan contains how many test cases to be written by each tester.