Answer / js_sabharwal

No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.

Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc

How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :

- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time

..etc

what is test log? what fields does it contain, At which stage do we use this in real time?

2 Answers  

---

What is cookie testing?

1 Answers   C DAC,

---

What is bud testing?

3 Answers  

---

Testing of Non-Functional requirements does not involove a) Performance tests b) Reliability tests c) usability tests d) Configuration tests

7 Answers   EDventures,

---

What metrics will be collected during the Testing i.e from requirement Phase to Maintainance Phase

1 Answers  

---

what is defect leakage?

2 Answers  

---

How will u decide test data to see that evey feature is thoroughly tested

0 Answers   Hewitt,

---

tell me about low severity & high priority bug?

2 Answers   Mphasis, TCS,

---

What is the difference between Functional testing and Functionality testing?

10 Answers   TCS,

---

What is the dirrerence in Bug Tracking Tool, Bug Reporting Tool and Test Management Tool? Please be clear in Detail.

1 Answers  

---

what is defect leakage?

3 Answers  

---

Hi, my name is Maiko and I work as a Business Analyst. Does anybody have experience with TOSCA Testsuite? I hear it's all new and great but I can't really find any user reviews. Please help me out. thx

2 Answers  

---