I want to learn security testing. To be candid I have just heard this term and never tried it. Is it beneficial for the product if security testing is done? How can I start? Do organizations value security testing and would it be another asset if added to my skill set?
3
-
check this answer - sqa.stackexchange.com/questions/5525/…– Bharat ManeMay 12, 2016 at 12:15
-
same as- sqa.stackexchange.com/questions/9275/…– Bharat ManeMay 12, 2016 at 12:17
-
I suggest at least looking to see what security testing is. When you've done a little more legwork, we'd be happy to answer questions about it that can be answered in a single answer.– Lyndon VroomanMay 12, 2016 at 16:19
Add a comment
|
2 Answers
There are different types of security testing all with their own path. It could be from actual penetration testing to just risks analysis.
From my experience (in the software development world) security testing is often ignored until a client asks for an audit or only executed after a security breach has happened. This greatly depends on the industry and type of product ofcourse.
I think you can start with a introduction training course like https://www.udemy.com/penetration-testing/ or watch other training video's.
It would certainly be an asset for any serious company, at-least someone should be aware of security risks and have a strategy to mitigate them.
answered May 12, 2016 at 8:15
Things have changed now, most of the companies management is Aware that Security testing should be included as part of Testing.Many critical Banking Applications, E-commerce Websites which stores customer Credit details have to oblige to PCI compliance.
To me, it's really interesting field to Dig bugs that may break down your systems and can get access to sensitive Customer Information or may bring down your systems for a While.Definitely, it will be an Asset for you to learn Penetration testing concepts and to hold a recognised certification.
Where to Start:
If you got no idea about Attacks and Vulnerabilities then start with Cybrary IT this is the place where you can watch lectures on Security concepts for free.
Learn more about OWASP, OWASP Top-10 attacks and their consequences and you feel that you're equipped with concepts of security testing and attacks then start implementing them, testing them practically here
Once You get practical hands on knowledge on finding vulnerabilities in an Application and implementing security attacks then you may think of tools and browser Add-on's. I feel it's too early for you to play with tools better to learn and implement things before playing around.
To get inspired more sign up to newsletter's of these websites which sends you a daily email of Current Security Hacks happening around.
Hope this information helps you to get started.