Answer / js_sabharwal

No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.

Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc

How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :

- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time

..etc

what is the common in all s.o.p (standaed operating procedure)?

0 Answers  

---

WHAT is Spring in term of Agile model?

2 Answers   HCL,

---

how to test if there are 2000 requirements ro be tested in an application ?

4 Answers  

---

How do we decide scope for smoke and sanity testing?

2 Answers   BMC,

---

What is Dataguidelines?

1 Answers  

---

10. Would you recommend this Web site to a colleague? To a friend?

0 Answers  

---

specify another matrix/table used for same functionality as of tracibility matrix?

1 Answers  

---

Hi Please tell me about ERP Project how do describe in interview Please tell me details about this project my id is chiku_69@yahoo.in

0 Answers  

---

i heard that mainframe testing is diff from other environments & has lot of keyboard input????pl clarify my doubt & let me know in what way its diff??

0 Answers  

---

what the tester should do ,if there are bugs in the requirements made by the business analyst?

4 Answers  

---

WHAT IS SECURITY TESTING.HOW TO DO SECURITY TESTING.IS THERE ANY FRAMEWORK AVAILABLE

2 Answers  

---

what should we do if the developer rejects the bug?

2 Answers  

---