Security testing

• What is Security Testing

a type of software testing that intends to uncover vulnerabilities of the system and determine that its data and resources are protected from possible intruders.

• Types of Security Testing

• How to do Security Testing

corresponding Security processes to be adopted for every phase in SDLC

 

Security Test should start as early as possible

The test plan should include
Security-related test cases or scenarios
Test Data related to security testing
Test Tools required for security testing
Analysis of various tests outputs from different security tools

• OWASP Open Web Application Security Project (OWASP) 

Testing Guide: https://www.owasp.org/index.php/Category:OWASP_Testing_Project

https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents

• Tools

netsparker: Vulnerability Scanning tool, scan a system against known vulnerability signatures.

Acunetix:  penetration testing,  simulates an attack from a malicious hacker,  check for potential vulnerabilities to an external hacking attempt

.....