Take the 2-minute tour ×
Software Quality Assurance & Testing Stack Exchange is a question and answer site for software quality control experts, automation engineers, and software testers. It's 100% free, no registration required.

As a security measure, we are now filtering access to our web service methods only to a small subset of machines, by IP address. Since I am relatively new to the game of testing, I wanted to know if this kind of IP filtering was vulnerable to specific attacks, or what kind of pitfalls to test for using this IP filtering method.

Things I already know: 1. The web service is vulnerable to IP spoofing and DoS attacks

Anything else?

share|improve this question
add comment

2 Answers 2

up vote 0 down vote accepted

Not sure that I understand your question. But I think if you want be sure that IP filtering works correctly you can test with proxy servers. However it is not easy to tell which security holes can exist on your web service without detail knowledge of this service itself, but you could search all possible web attacks and consult with web service developer/architect asking if specific attack type is technically possible.

share|improve this answer
add comment

Have you tried to use some security test tools such as Web crawler? you can find several tools on https://www.owasp.org/index.php/Main_Page Or if you really want to test your security try BackTrack Linux which contains lots of tools for these kind of testing http://www.backtrack-linux.org/

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.