Search This Blog

Saturday, 3 October 2015

Security Testing

Security Testing is a non-functional testing type and intends to identify the flaws in the security mechanisms of the software. Software security vulnerabilities are big business for potential attackers.  Identifying them early and knowing what common pitfalls to avoid can make a big difference to the resilience of the applications.

To be concise, the top 10 application security vulnerabilities are:

  1. Injection

  2. Broken Authentication and Session Management

  3. Cross-Site Scripting (XSS)

  4. Insecure Direct Object References

  5. Security Misconfiguration

  6. Sensitive Data Exposure

  7. Missing Function Level Access Control

  8. Cross-Site Request Forgery (CSRF)

  9. Using Components with Known Vulnerabilities

  10. Unvalidated Redirects and Forwards
Follow and Like us:

Security Testing

No comments:

Post a Comment