Scribd
Upload
16 views3 pages

Web Application Security Testing Techniques

User and company information stored on web applications can be vulnerable to attacks if the applications have security issues. It is important to test web applications for security from both external and internal threats. Qualified security specialists should test the security of web applications using various techniques to identify vulnerabilities that could be exploited by hackers. This document will discuss different techniques for testing the security of web applications, including penetration testing and testing for vulnerabilities like SQL injection and cross-site scripting attacks. It will also cover integrating security testing into the software development lifecycle.

Uploaded by

Rajesh Lenka
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
16 views3 pages

Web Application Security Testing Techniques

User and company information stored on web applications can be vulnerable to attacks if the applications have security issues. It is important to test web applications for security from both external and internal threats. Qualified security specialists should test the security of web applications using various techniques to identify vulnerabilities that could be exploited by hackers. This document will discuss different techniques for testing the security of web applications, including penetration testing and testing for vulnerabilities like SQL injection and cross-site scripting attacks. It will also cover integrating security testing into the software development lifecycle.

Uploaded by

Rajesh Lenka
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Abstract

Technique behind web application security testing

User and critically important company information is managed using web applications. For this
reason, web applications serve as a door for attacks. The vulnerabilities present in the application
can be exploited by an attacker. Even with the rapid development of Internet technologies, web
applications have not achieved the desired security levels. As a result, web servers and web
applications are popular attack targets.
With the large number of highly skilled hackers in the world, security should be a huge
concern for anyone building a web application. We need to test how secure our web application
is from both external and internal threats. The security of our web application should be planned
for and verified by qualified security specialists.
In this section I provide further details about the particular techniques that we have
investigated, including existing approaches and a new approach to test web application with full
protection.

CONTENTS

Page No

Chapter 1

: INTRODUCTION

01

1.1 OBJECTIVE

Chapter 2

WHY SECURITY TESTING

03

[Link] OF THREATS
1.3 SECURITY TESTING TECHNIQUES
1.4 SECURITY TESTING APPROACH

Chapter 3

TYPES OF SECURITY TESTING

08

Chapter 4

INTEGRATION OF SECURITY PROCESSES WITH THE SDLC

09

Chapter 5

TYPES OF WEB APPLICATION TESTING

10

1.1FUNCTIONALITY
1.2 USABILITY
1.3 INTERFACE
1.4COMPATIBILITY
1.5PERFORMANCE
1.6SECURITY

Chapter 6 : TEST CASES FOR WEB ELEMENTS


1.1
1.2
1.3
1.4
1.5
1.6

GUI & USABILITY TEST SCENARIOS


TEST SCENARIOS FOR IMAGE UPLOAD FUNCTIONALITY
TEST SCENARIOS FOR SENDING EMAILS
TEST SCENARIOS FOR EXCEL EXPORT FUNCTIONALITY
TEST SCENARIOS FOR SECURITY TESTING
TEST CASE OF DIFFERENT WEB COMPONENTS

15

Page No

Chapter 7

: PENETRATION TESTING

26

Chapter 8 WHAT IS SQL INJECTION AND HOW TO TEST WEB APPLICATION


AGAINST SQL INJECTION ATTACKS
30

Chapter 9
ATTACKS

Chapter 10

: HOW TO TEST WEB APPLICATION AGAINST SQL INJECTION


37

CROSS-SITE SCRIPTING(XSS) ATTACK

43

SUMMERY & FUTURE WORK

58

REFERENCES

59

You might also like