The security testing means "how safe system working from 
external threats"

the level of security testing varies with the type of 
application.

the application/product/project may be any one of the 
following
         1.Desk Top 
         2.client Server
         3.Web based Application

when we are coming down from desk top to web based 
application the security measures increases.
For testing strategy varies with the type of application.

some important areas of security testing are
         1.Uncontrolled System Access(By intruders)
         2.Operating system  flaws
         3.Communication system Flaws
         4.Weak encryption algorithims.....etc

security testing: 
  The process to determine that an information system (IS) 
protects data and maintains functionality as intended.

general aspects of security testing


Authorization
Access control
Encryption/Decryption

Security Testing mainly deals with Authorization and 
authentication

Authentication: Users need to be user accts to enter into 
App
Authorization: Users must have permissions to view the pages

Security is a primary concern when communicating and 
conducting business- especially sensitive and business- 
critical transactions - over the internet. 

The user wants assurance that personal and financial 
information is secure. Finding the vulnerabilities in
an application that would grant an unauthorized user
access to the system is important.

In security testing you must and should conduct 
session Tracking is very important in web applications.

Security is nothing but we check authorization and access 
controls
we check with firewalls and cryptography in web applications

exclamation privilege, cookies poisoning, cross-site 
scripting, sql injection, spoofing password, access 
denial, authorization, etc are included in security test on 
web application

verify the application whether it is securable are not from 
unauthorerised access and permissions.


during security testing testing team verifies

1)autherisation
2)access control
3)encription/decription

DURING THIS TESTING TESTERS WILL VERIFY THE SECURITY ISSUES
OF THE APPLICATION LIKE AUTHORIZATION AND ACCESS CONTROL