Security Testing - II - Web Testing

Security Testing - II - Web Testing - I

Security Testing - Web Testing

Attributes in Security Testing

1. Authentication - The process of denying and granting access to the network resource. Before accessing the system, the process of identifying the user is called authentication.

2. Authorization

The process of giving permission and restrictions to the users of the system. This is implemented in the access list, user role based and user group based.

3. Confidentiality

The information and services are available only for the authorized and requested user.

4. Availability

The availability of the software application is to check the system is available for the authorized users.

5. Integrity

This ensures that information provided to the user is correct and updated.

6. Non-repudiation

The process of tracking who access to the systems and which of the request is denied

7. Resilience

This is the process of checking the system is resistance to bear the attacks. This is implemented by using encryption and two layer authentication.

Testing Methodologies

1. Black Box - All the information are provided to the tester.

2. White Box - The information are not provided to the tester. Test with the real world scenarios.

3. Gray Box - The hybrid of the black box and white box.

Sample Test Scenarios for Security Testing

Thanks and Regards,

Dananji.

Comments

Selenium Tutorial I

Create your first script in webdriver Today we are going to learn how to create the selenium script in webdriver. First, create a new java class according to the below steps. 1. Create a new java project. 2. Enter the following details in the "New Java Project" pop up window. * Project name - Google * Location to save the project - Click on checkbox to use default location * JRE - Select " Use an execution environment JRE " * Project Layout - Click on "Create separate folders for sources and class files" then click on Finish button. 3. Right click on Google project and add new package for the selected project. 4. Enter the valid name for the name of the packa...

Strategies and methods for test case design II

Strategies and methods for test case design Today we are talking about how to get an approach for writing a good test case. Developers cannot prevent or eliminate all the defects raised in the application during implementation. That's why the application should be tested before deliver to the customer. Before starting the execution, we need to identify test scenarios and write test cases for each identified scenarios. Test case is test description which needs to be executed to verify the functionality or feature of the application. A good test case have a good possibility of finding defects. For designing effective test cases, there are two basic strategies that can be used. Black box test strategies White box test strategies Test Strategies Sources Testing Techniques Black Box Functional requirement specification Equivalence partitioning Business requirement specification Boundary value analysis Domain knowledge State Transition Testing ...

Strategies and methods for test case design I - Requirement traceability matrix

Requirement traceability matrix Today we are talking how to design requirement traceability matrix for Amazon web page. This is the URL for Amazon https://www.amazon.com The process for designing requirement traceability matrix is as follows. Identifying business requirement Identifying functional requirement Identifying test scenarios Identifying test cases for each scenarios Finding validation tables for related test cases Identifying business requirement Business requirements are performed for meeting organizational objectives and finding solutions. Business requirement specification is designed by business analyst. The main objective of this document is to find out business solutions for the identified problems. It is covered customer needs and expectation. Use cases are designed after being gathered and validated business requirements. Identifying functional requirement Functional requirement specification is designed as a formal statement of application’s funct...

D Zone

Search This Blog