Skip to main content

SECURITY TESTING.....how to make your website more secure!!

By
SECURITY TESTING



Before discussing how to secure your website. Let us take a quick review on what is testing??? What is website??? And what a security testing is???

WEBSITE

 A website is a set of web pages or we can say that website is a collection of web pages. These web pages are continuously accessed on the internet.

WEBSITE TESTING

Website testing is a type of testing  where test cases or test plans are executed in order to check various web applications.

 In website development, security is the main concern that really need to be concentrated upon If your website is not really secured, any unauthorized person can easily hack private information or any confidential data of any user and can lead to a severe harm. Therefore, in web development security testing is most important.

SECURITY TESTING

 Security testing is a kind of testing in which various static and dynamic analysis are done,
 different test cases are planned and executed in order to find whether client’s website is fully secure or not.

VARIOUS THREATS TO A WEBSITE

There are a number of ways in which a person illegally harms a website, some of them are:
  • URL manipulation 
  • SQL injection
  • Cross-site scripting
  • Password manipulation

TIPS TO MAKE YOUR WEBSITE MORE SECURE

  • For, Http Protocol really matter, I mean security tester definitely should be aware of Http Protocol. He/she should also aware of client-server communication. He must know SQL & XSS. All these things are really important for tester to efficiently plan and implement security testing

  • Sometimes by default username and password of many ID's gets saved into cookies without encryption*. And then obviously hacker can easily extract the login details from there I mean the password and username can enter into the private word of the poor victim.



  • Therefore, during security testing

    , the tester should design the website in such a manner that it should enforce the user to make a strong password by showing     him/her some points regarding how to create passwords (like your password should contain at least 1 numeral, 1 capital letter and alphabets from a..z, and, at least, one symbol)

*encryption - encryption is actually the conversion of readable data or information into unreadable codes.
  • Security tester should make sure that any HTML or SCRIPT should not be accepted by the application  otherwise it could prove more prone to the hacker’s attack

       During security testing of any website application, the tester should really need to take care of some important points. These are:
  1.  Configuration details of the application or server
  2.  All the services which are running on the server
  3. User or customer data currently hosted by the application
For more information regarding testing kindly visit:
http://www.precisetestingsolution.com/

Labels:

Comments

Post a Comment

Popular posts from this blog

In Regression Testing: Difference between Automation And Manual Testing

By
The difference between an Automation Testing & Manual-Testing is a pillar of the Software testing, because the whole-testing is based on the Automation Testing and Manual Testing. In the project you can do both Automation Testing & Manual Testing & you can also do both Automation testing and Manual Testing simultaneously. Difference between Automation and Manual Testing Automation Testing Manual Testing The automation testing is a continuous component of the manual testing. This testing is an initiate of the testing, without of this testing we cannot start the automation testing. This takes less of time. This takes a lot of time. In the automation testing, we always test by the running the scripts. In the manual testing testers’re allowed to do the random for find the Bugs. In automation testing, it is done on the different on same time. The manual testing would be executes sequentially. ...
Post a Comment
Read more

Want to know about Mobile Application Testing? Came to right place

By
What is Mobile Application Testing ? Mobile Application Testing is a phenomenon of testing functionality, usability and consistency of application software designed for mobiles. It is done in two ways: Automated and Manually. When you buy a new mobile, various applications came pre-installed and some you install as per your need from mobile software distribution platforms such as Google Play, Nokia Store etc. In the recent years, mobile devices had shown a rapid growth rate .  Factors that give an open challenge to Mobile application Testing : 1. Mobile devices models : Different models have different hardware configurations, input methods (some are QWERTY, some are touch while others are normal). 2. Several different operating systems (OS) : Market  is full of availability of different operating  systems  (   Android , IOS, BREW, BREWMP, Symbian,   Windows Phone , and   BlackBerry   (RIM)).Each operating system is unique in ...
Post a Comment
Read more

INTRODUCTION TO SELENIUM TESTING

By
If you are interesting in software testing and desperately want to work in software testing profile then this post is surely for you, as we know that selenium testing is an important aspect of  software testing so you should go through this at least once. WHAT IS SELENIUM TESTING? SELENIUM is a tool for authoring tests without learning test scripting language like selenium IDE. Selenium is not just a tool but actually it is a cluster of independent tools. And selenium testing is a testing which is performed by using selenium tool. WHY WE USE SELENIUM TESTING I f we talk about the functioning and scenario of today's IT industries or companies then it is known to everyone that there is a mass movement towards automation testing. Not only this but the cluster of manual testing scenario  has also raised a great demand to make to manual testing automated by using various tools such as selenium.  There are numerous benefits which a software tester gets if he/she impleme...
Post a Comment
Read more