Security testing is a process to determine that an information system protects data and maintains functionality as intended.

learn more… | top users | synonyms

5
votes
0answers
779 views

How to use soapUI for Boundary Scan security tests?

I've tried to use soapUI to set up a Boundary Scan security test, using the sample wsdl provided in the soapUI tutorial. I changed it so that it has a restriction on the username field for the ...
3
votes
0answers
87 views

Attack surface metrics analyzer tool

I am trying to find a tool to measure vulnerability into my application ( each entry point and exit point into my application ) and then apply it to Manadhata's metrics I found Microsoft surface ...
1
vote
0answers
58 views

xss scripts through console of web-developers-tools

So, well i am learning selenium webdriver, junit4. I need to know, is it a proper way to add "xss scripts" through console of web developers tools ? Can anyone help me with example ?
0
votes
0answers
12 views

Do we need a security officer to safeguard security of an application?

Currently I am thinking about how we can improve the focus of security testing and integration it into our development cycle. Now I am wondering, do we need a CSO or Security Officer role? Or is it ...
0
votes
0answers
16 views

on-premise SSL/TLS Cert testing tool (100's of sites)

Has anyone found a good way to on-premise test SSL/TLS certs for many (100's) of sites on a regular basis? The usecase is websites setup both internally, and with VPN tunnels to many customers, as ...
0
votes
0answers
17 views

Document All SQL Calls in Visual Studio

As a QA tester I need to know all of the SQL Calls that a project is making in order to verify security concerns and access that the application my need. I know that I can find all of the SQL calls by ...
0
votes
0answers
27 views

Firefox error while creating proxy change for burp suite

Once I do Firefox manual proxy settings for burp suite, I am unable to run any live sites. How can I run and login from a live site hosted in GoDaddy to do a security test using burp suite?