how we conduct security testing in realtime,for every
project we conduct security testig or not
Answer Posted / js_sabharwal
No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.
Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc
How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :
- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time
..etc
| Is This Answer Correct ? | 15 Yes | 1 No |
Post New Answer View All Answers
Tell some examples of bug severity and bug priority?
What is regression testing? When to apply it?
What are the benefits of requirement traceability?
What is black box testing, and what are the various techniques?
a newly launched web site is hosted on web server.It is expected that 100 people visit the website every hour and browse 30 pages spending a total 15 minutes. what is the maximum hits/sec that the web server should support this load?justify your answer. need urgently. by rimesh
Could anyone share FAQs for Test Manager position...
Explain Single View Testing ?
1.Enlist the types of testing performed for any window in sequence? 2.Use of edit_get_list function 3.Accuracy & Precision
What is application programming interface (api)?
hai friends i need a general test cases for check box,drop down button and radio butoon can anybody reply me plz..........thanks in advance
What are the two main categories of software testing?
What is fuzz testing?
Tell me the algo for convering number into words. Meanse if the number is 4567 then it should print Four Thousand Five Hundred Sixty Seven
How do you estimate white box testing?
Presently working in software company as a software test engineer with 1.5 yrs of experience but i am 2002 passout.Gap is 6 yrs.Is there any problem getting job in MNC? Which criteria HR follows for recruiting test engineer?