Questions tagged [security]

For questions regarding the security of test environments.

Filter by
Sorted by
Tagged with
1
vote
0answers
26 views

Is it permissible to save the CVV of a charging card option [closed]

Can we save CVV if we have a save your card option? What is a secure way to save cvv? What are the security threats?
0
votes
1answer
55 views

Is there any reason why preventing Disposable Email Address used to sign up? [closed]

I've been tested some of websites and apps, and I noticed that some of them preventing user to Sign Up using Disposable Email Address First things come to my head, this can be used to join an event ...
1
vote
3answers
149 views

How to Automate UI, API, Performance & Security testing using a single Framework?

How to Automate UI, API, Performance & Security testing using a single Framework. One test case should check all these things. Any Suggestions.
0
votes
1answer
43 views

Security test for .net desktop application: upload a file (shell) to check how software behaves

I am looking for a most common injection file (shell) to import my software to check if it is open to these kind of attacks or not. Any recommendation, web sites or blogs? (summary: i will upload ...
2
votes
1answer
67 views

How can someone prevent to become a victim of social engineering? [closed]

There is a says that "There is no patch for human stupidity" Human is the weakest point of any system, In the field of Security "Social Engineering" is a very popular technique to gather information. ...
2
votes
2answers
81 views

If we can not catch all of security bugs, why do we still test?

Someone asked me a question next to water cooler: It is unrealistic for us to catch all of the security loopholes, so why do we still execute security tests? I was speechless, could not provide any ...
1
vote
1answer
33 views

Security policies and procedures [closed]

I am compiling a list of general security policies and procedures at the moment. The following items have been included: Acceptable use - this policy defines what behaviors are acceptable and what ...
6
votes
4answers
419 views

Is security assessment a one-off task?

I visited a client today. The manager I was talking to wanted me to perform a security assessment for his team. He put lots effort in saying "We only need one security assessment, as we need to tick ...
4
votes
1answer
69 views

Should I offer free security tests to my clients?

I have been engaging a client for two months now. They are a major electricity generation and distribution company. For each project, I have got more than enough time to finish my SoapUI test cases ...
6
votes
3answers
910 views

The difference between security audit and security testing

I am a bit confused by security audit and security testing, do they not both test against security holes? What are the differences between them?
1
vote
1answer
332 views

How simple authentication and Token based authentication differs?

I am a newbie in security testing. For some projects, my Project Manager asks me to do a security check. For basic security, I do check whether sensitive data is stored in cookies and whether all the ...
0
votes
2answers
90 views

How to analyze the result of vulnerability scanner

I need to do penetration testing, I'm scanning the vulnerability of My Web Application using VEGA tool. I did this using proxy mode set the manual proxy and recorded the actions after login in the ...
2
votes
0answers
49 views

What is the best tool for network packet analyzing? [closed]

I want to perform penetration testing and assess the network traffic using a packet analyzer. Which tool is used by most people? How does it compare to other Applications, what is the state-of-the-art?...
2
votes
2answers
103 views

Tools used in penetration testing [closed]

I would like to perform penetration testing on my project, to make it more secure. and to fix the vulnerabilities and weaknesses in the system. Vulnerabilities allow attackers to exploit or control ...
0
votes
2answers
753 views

I want to learn security testing [closed]

I want to learn security testing. The most important security testing types are : sql injection attacks, cross-site scripting, phishing attack. I don't know how to start learning. I want to find some ...
0
votes
1answer
68 views

Do we need a security officer to safeguard security of an application?

Currently I am thinking about how we can improve the focus of security testing and integration it into our development cycle. Now I am wondering, do we need a CSO or Security Officer role? Or is it ...
0
votes
2answers
97 views

What is security testing? Please suggest how can I start. Any tools or any methods? [duplicate]

I want to learn security testing. To be candid I have just heard this term and never tried it. Is it beneficial for the product if security testing is done? How can I start? Do organizations value ...
2
votes
2answers
483 views

Protecting credentials in Selenium project

Is there a method and/or best practice for protecting credentials in a Selenium project using Java? The two main ones for my application will be user credentials for logging into the site, and DB ...
0
votes
1answer
922 views

Has anyone used Bromium vSentry on their test machines?

My company wants to roll out Bromium vSentry to all their desktop and laptop machines. They tend not to distinguish between general office machines, and machines used for our testing. Although I have ...