How do u test any "web-site" as a secure site...? or How do
you
test the security of a web-site...?
Answers were Sorted based on User's Feedback
Answer / umesh kr
Any web site is a secure website after doing some following
steps:-
IF user is loggen in and now copy tht URL aftr login..
..and then paste it to another tab to tht same browser...If
it ask for doing login again then tht website is perfectly
secure...
If not then tht website is not secured...
| Is This Answer Correct ? | 6 Yes | 0 No |
Answer / shankar.majji
1. Valid and invalid log-in.
2. limits defined for the no.of tries.
3. Log file is generated or not.
4. any querries are not acceptable on databases without
authorization.
5. application should be accessible for only valid users.
| Is This Answer Correct ? | 6 Yes | 1 No |
Answer / the deep
If the site invloves Credit card transactions we should see
that the SSL is active i.e to use HTTPS for such pages
| Is This Answer Correct ? | 1 Yes | 0 No |
Answer / narendra
using
X-SS method
URL injection/SQL injection
Cookies
| Is This Answer Correct ? | 2 Yes | 1 No |
Answer / chaitanya
It should allow only the Valid Users. And should not allow
the Unauthorised users. And the sessions should expire
properly.
| Is This Answer Correct ? | 1 Yes | 1 No |
It should allow autharised user with valid user name and
password.It should not allowed authorised user invalid user
name and password.It should not allowed unautharised
person.
| Is This Answer Correct ? | 1 Yes | 1 No |
Answer / sm
I can able to test this scenario based on the users system
allwoing.Whether system accepting valid users or not
| Is This Answer Correct ? | 0 Yes | 1 No |
i have soure and target having 1 laks records same structure and same data. no primary key. how to do data validation in. how to identify each and every record same r not. i want check every record. wat is process.
who will assign the seviourity & priority for a BUG in a project ? tester or any other.......... ????
What kinds of testing have you done?
In Risk, What is the difference between mitigation and contigency plan in risk.
what is Test Responsibility matrix?
write test cases on "Login Window" ?
how can u prepare the test plan?
Hello everybody, How many people do you think one sprint team can have in average?
One scenario: yahoo inbox doesnt show emails but instead of all inbox emails are shown in draft folder. How do u wrte the defect repert for this scenario.
1.Unit testing ->integration testing->system testing->UAT in this where do u do the functional testing & regression testing? if these two done in each phase why should not mentioned in that ?
plz anyone can explain me what is PB/MF based application?
Which is the better way to explain tipical bug life cycle?