how we conduct security testing in realtime,for every
project we conduct security testig or not

Answer Posted / js_sabharwal

No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.

Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc

How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :

- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time

..etc

Is This Answer Correct ?    15 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

How to do integration testing on duster......

1250


anybody there with 3+ exp in software testing looking for change and like to work in bangalore fwd your resume to vinodhanandhan@gmail.com

1745


Write all combinations of test cases for calculater on + symbel

1811


Hello. I am not here to answer your question. I jus found a job as software QA engr. And i am totally new to software testing. So can someone pls help me in the following scenario? there is this registration screen, and it contain: One textbox called Nickname which only accept alphanumerical One textbox called Contact which only accept numerical, One textbox called Email which can be filled with alphanumerical and symbol and One button called Register now becos there is so many textboxes, where i can filled with alphabet, number, symbol, "just space", leading zeros, leading space. there will be lots of combination. can someone pls help.. i will be appreciated if u can post the test case of the scenario i mentioned. Lots of Thanks

1806


How does your preferred work style work with the ideal test-manager role that you just described? What is different between the way you work and the role you described?

1710






1.What is bidirectional traceability ??? and how it is implemented? 2.What is Automation Test frame work ? 3. Define the components present in test strategy? 4. Define the components present in test plan? 5. Have u written Test plan ?…. thank u!plz reply........

2252


Which was the most interesting bug you found.

2470


How to Generate Test Case for Shopping Cart?

2411


Suggest some book to learn more test case???

1363


could any body plz let me know which is best training institute for telecome testing in hyderabad?

1524


What is the difference between a bug, a defect and an error?

691


Tell some examples of bug severity and bug priority?

642


What is the different between SIT and UIT?

890


Could some one tell me test cases for multi line text boxes like Notes field?

1702


Hi,all i have a desktop App. which have a feature, It's a demo version if u want full version then u have to perches it. Pls give me some idea ASAP how can i break the App.

1504