how we conduct security testing in realtime,for every
project we conduct security testig or not
Answer / js_sabharwal
No, we dont conduct security testing for every project. For
example , I am developing Software for Primary Rimes or
Small Game.. I dont need to perform security testing.
Security Testing depends on the Risk of you project.
For example, Airplane Software, Health Care Softwares,
Banking Domains ..etc
How do we conduct ?
There are several ways to perform it again entirely depends
on your project/product, methods for web security testing
can be :
- Check for session hijacking.
- Check for session time out.
- Check for cross site scripting
- SQL Injection
- Http/Https
- Attempt of breach should log in 'Server Logs'
- Cookies Testing - Accepting/rejecting, invalid, decrypting
- Unauthorized access
- Multiple user login at same time
..etc
| Is This Answer Correct ? | 15 Yes | 1 No |
i know that there are two types of applicationa.one is web applications and the other is client-server application.web means online applications,and client server means we have to install in our systems to use it.now my question is ,yahoo messenger which we have to install in our system and have to work on line.this application comes under which type of application.
If you find a bug and the developer says it is as-designed, what can you do?
what is difference between severity and priority? what is difference between bug and defect?
23 Answers AD Solutions, Cognizant,
What is defect validity ratio?
As you are working with cmmi level 5 company ,can you tell me what processes you r following as QA engineer?
what is stand alone application?
how to track defects by using JIRA bug tracking tool
Is testing is done for ERP Products.?? like SAP R/3,If yes please send me a notes/Details. Thank you in advance
What is security testing?
What is meaning by protype in SDLC ?
If a webapplication is handed over and you are requested to come out with a test strategy. what are all the key things will you include in test strategy?
How to test login page or web login page? are they difference?