how we conduct security testing in realtime,for every
project we conduct security testig or not
Answer Posted / js_sabharwal
No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.
Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc
How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :
- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time
..etc
| Is This Answer Correct ? | 15 Yes | 1 No |
Post New Answer View All Answers
What impact ratings have you used in your projects?
What is state transition?
What's the relationship between environment reality and test phases?
what kind of testing have u done?
What is the Myers Boundary Table?
What will be the QA roles and responsibilities in Health care stream like BCBS,can someone please explain me any example project regarding health care services in web-based application?
What is security Hole ? Is this possible Some one can acess any of restricted page (like admin side)? How you test this previllaze?
Zenq interview questions for manual testing
Explain severity with example and expalin each example?
What is coverage and what are the different types of coverage techniques?
1.What is bidirectional traceability ??? and how it is implemented? 2.What is Automation Test frame work ? 3. Define the components present in test strategy? 4. Define the components present in test plan? 5. Have u written Test plan ?…. thank u!plz reply........
Write the 10 high test cases for making video call/face time
What are the different ways of doing black box testing?
What is your Approach when you find 10 Sev-1 bugs in 50 test cases?
what types of testing have u done in ur project?and expalin it detail?