0

This question already has an answer here:

I want to learn security testing. To be candid I have just heard this term and never tried it. Is it beneficial for the product if security testing is done? How can I start? Do organizations value security testing and would it be another asset if added to my skill set?

marked as duplicate by Bharat Mane, IAmMilinPatel, Kate Paulk, Lyndon Vrooman, Tarun May 13 '16 at 8:13

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2

There are different types of security testing all with their own path. It could be from actual penetration testing to just risks analysis.

From my experience (in the software development world) security testing is often ignored until a client asks for an audit or only executed after a security breach has happened. This greatly depends on the industry and type of product ofcourse.

I think you can start with a introduction training course like https://www.udemy.com/penetration-testing/ or watch other training video's.

It would certainly be an asset for any serious company, at-least someone should be aware of security risks and have a strategy to mitigate them.

1

Things have changed now, most of the companies management is Aware that Security testing should be included as part of Testing.Many critical Banking Applications, E-commerce Websites which stores customer Credit details have to oblige to PCI compliance.

To me, it's really interesting field to Dig bugs that may break down your systems and can get access to sensitive Customer Information or may bring down your systems for a While.Definitely, it will be an Asset for you to learn Penetration testing concepts and to hold a recognised certification.

Where to Start:

If you got no idea about Attacks and Vulnerabilities then start with Cybrary IT this is the place where you can watch lectures on Security concepts for free.

Learn more about OWASP, OWASP Top-10 attacks and their consequences and you feel that you're equipped with concepts of security testing and attacks then start implementing them, testing them practically here

OWASP- WebGoat

Google Gruyere

Test Fire

Once You get practical hands on knowledge on finding vulnerabilities in an Application and implementing security attacks then you may think of tools and browser Add-on's. I feel it's too early for you to play with tools better to learn and implement things before playing around.

To get inspired more sign up to newsletter's of these websites which sends you a daily email of Current Security Hacks happening around.

HackRead

The Hacker News

Hope this information helps you to get started.

Not the answer you're looking for? Browse other questions tagged or ask your own question.