Interested to Buy Any Domain ? << Click Here >> for more details...
Explain about Security Testing in webbased application?
- 2 Answers
- 8385 Views
- Crea, I also Faced
- E-Mail Answers
Answer Posted / ramyab.mca@gmail.com
Hai...
Security Testing:
Following are some test cases for web security testing:
Test by pasting internal url directly into browser address
bar without login. Internal pages should not open.
If you are logged in using username and password and
browsing internal pages then try changing url options
directly. I.e. If you are checking some publisher site
statistics with publisher site ID= 123. Try directly
changing the url site ID parameter to different site ID
which is not related to logged in user. Access should
denied for this user to view others stats.
Try some invalid inputs in input fields like login
username, password, input text boxes. Check the system
reaction on all invalid inputs.
Web directories or files should not be accessible directly
unless given download option.
Test the CAPTCHA for automates scripts logins.
Test if SSL is used for security measures. If used proper
message should get displayed when user switch from non-
secure http:// pages to secure https:// pages and vice
versa.
All transactions, error messages, security breach attempts
should get logged in log files somewhere on web server.
K,Byeee...
Thanks & Regards
B.Ramyasri
| Is This Answer Correct ? | 8 Yes | 2 No |
Post New Answer View All Answers
What is the difference between web based application and client server application?
What is mean by incident logging system ?
How do you go about testing a project?
Any one send me sample question for multimedia testing with microsoft access database. I am having interview next week. Please post it or send me my personal e-mail. Thank You
Explain about PET Model?
What are the phases involved in software testing life cycle?
Who are all involved in an inspection meeting?
What is showstopper defect?
What r the sequences that leads to automation?
what is fusion testing and impact analysis???
What are the different strategies for rollout to end users?
Can any body tell me in real time how cookies testing is done. And please tell me the steps.And for cookies testing test cases is needed.
What will be the testcase for a uniquely generated number in the application?? i mean to say is, how will i conform the application is generating a unique value.... please do answer...
in transfer funds module, how you come to know that amount has been transferred successfully or not....explain in detail
How will you determine when to stop testing?
