Manual testing 44 - Security Testing Checklist | Security Testing guidelines explained

Publié le: 16 juillet 2018
sur la chaîne: Ankpro Training
5,491
84

Security Testing Checklist | Security Testing guidelines explained
Like our facebook page www.facebook.com/ankprotraining
Security testing :
Testing the authentication of an application to check how will the application is secured from unauthorized users is called Security testing.

Check for major security flaws associated with user authentication
Does logging in involve a two-step verification?
After you’ve logged out, can you access your account without logging in?
Are there ​password rules​ in place an all authentication pages?
Does the password field mask user input?
After you’ve changed the password, can you still log into your account with an old password?
How many times can the user input an invalid password?

Does sensitive data appear in any of the following?
URL.
Error messages of any sort.
Any pages that don’t require a login.
In the source code of the page. If yes, is the ​View Page Source / View Source Code option disabled? ​
Is there any sensitive data stored in cookies?
Is sensitive data of any kind still accessible if some functionality of the app is not working?
Are there traceable log files for storing important information? Does the app update these files as specified?

Does the app use HTTPS / SSL?

Does the app use encryption when handling sensitive data
If there are session values in the address bar, does the app encrypt these values?
Does the app encrypt cookie data?

What happens if you refresh the page or click/tap Back when a transferring sensitive data in mid-progress?

Can the user use your app after the session has expired?

Can a user access the functionality that is only available to other roles?
How does the app handle an SQL injection?


Sur cette page du site, vous pouvez voir la vidéo en ligne Manual testing 44 - Security Testing Checklist | Security Testing guidelines explained durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur Ankpro Training 16 juillet 2018, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 5,491 fois et il a aimé 84 téléspectateurs. Bon visionnage!