Explain about Security Testing in webbased application?
Answer Posted / ramyab.mca@gmail.com
Hai...
Security Testing:
Following are some test cases for web security testing:
Test by pasting internal url directly into browser address
bar without login. Internal pages should not open.
If you are logged in using username and password and
browsing internal pages then try changing url options
directly. I.e. If you are checking some publisher site
statistics with publisher site ID= 123. Try directly
changing the url site ID parameter to different site ID
which is not related to logged in user. Access should
denied for this user to view others stats.
Try some invalid inputs in input fields like login
username, password, input text boxes. Check the system
reaction on all invalid inputs.
Web directories or files should not be accessible directly
unless given download option.
Test the CAPTCHA for automates scripts logins.
Test if SSL is used for security measures. If used proper
message should get displayed when user switch from non-
secure http:// pages to secure https:// pages and vice
versa.
All transactions, error messages, security breach attempts
should get logged in log files somewhere on web server.
K,Byeee...
Thanks & Regards
B.Ramyasri
| Is This Answer Correct ? | 8 Yes | 2 No |
Post New Answer View All Answers
How to explain a banking project in interview ? like project discription is Client Online Banking Application provides access to information relating to Banking Online Services provided by Axis to View daily customer transactions, Current and Previous customer statements, Transfer funds from Chequing and Savings accounts ................ From interview point of view can any one explain this project in laymans language
What is the limit for test steps?It should be 10/20/30etc
need testing projects where can i find them
Can you explain random/monkey testing?
how to write defects in excel sheets when defects occured
iwant know IEEE formate ,how it is used and exactly where it is used? i have details it follows test plan, testcases...etc. i want real time explanation. pls any one give?
Hello Varun, Kindly send me the material as well as sample question papers as i am interested in doing the certification. Kindly help me out in this regard. Here is my mail ID: bjyothitesting@gmail.com
what are the prerequisite conditins to test clientserver and web applications
Hi,all i have a desktop App. which have a feature, It's a demo version if u want full version then u have to perches it. Pls give me some idea ASAP how can i break the App.
Explain the manual testing process?
What is defect removable efficiency?
What is the difference between a standalone application, client-server application and web application?
Hi Friends, This is Chennamsubbaraidu.i Have 2+ Years Realtime Exp in Manual Testing.Am Looking to Shift From My Present Company.Please if u Have Any Openings in Your Company's, Please Let Me Know.Any Location Prefer.Thanks.
1) Test summary contains ? 2) Requirement Tracebility means ? 3) Test Effort contains ? 4) Test Planning Productivity ? 5) Metrics should be caluclated ? 6) Interest rate Rsik is a type ? 7) Test analysis and Design process task? 8) secured loan is a part of Liability (or) assest in a balance sheet? 9) Money Market means? 10) a ------ specifies all of the terms of a loan and the obligations borrower ? 11) what is a primary market is ? 12) Quality of Testing measure with ? 13) Company has a share with facevalue 10 rs/- and NAV of 37 after comapny has given Dividend of 35 % then How much NAV become ? ( I don't know what is NAV means, question overall Idea I am giving not 100% perfect ) the potions for these are 1) 33 2) 33.50 3) 37 4) 42 14) one compay has taken 10 million loan from a bank for a Interest rate is 10 % and base amount is 0.4% so how much they had paid monthly Emi ? they provideansews like 1) 100000 2) 114000 3) 140000 4) 104000 Remaing questions I not remember.
what types of testing have u done in ur project?and expalin it detail?