Answer / js_sabharwal

No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.

Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc

How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :

- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time

..etc

aplitue questions will be based on wich type ?

0 Answers   Global Logic, TCS,

---

What are the types of maintenance?

0 Answers  

---

How do u go about testing of client server application

1 Answers   Sonata,

---

What is difference between Defect and Bug?

12 Answers  

---

What's the difference between system testing and acceptance testing?

0 Answers  

---

can anybody tell me "what is ur testing process in ur company" pls explain what is the process when v get a build?

5 Answers   Verizon,

---

Explain the defect life cycle.

0 Answers  

---

How is testing affected by object-oriented designs?

1 Answers   Crea,

---

what is web server ur using at ur current testing of web application.

0 Answers   Wipro,

---

What is the difference between quality assurance and quality control?

4 Answers   Crea,

---

Genarally what we have to tell. If anybody asks in the interview. what are challenges u faced in the Project and what are the Risks u faced in the Project, Anybody can suggest it ......Thanks in Advance....

0 Answers   Fidelity, HCL,

---

how do u know whether the particular project belong to client server or web -based?

1 Answers  

---