what you consider in security testing particularly in web applications?
exclamation privelege, cookies poisioning, cross-site scripting, sql injection, sproofing password, access denial, authorization, etc are included in security test on web application jay ibm