Security Testing

Hi please help me out in compiling a checklist which includes all the test cases for security testing of website or any online application.....please share if anyone has a website security checklist.....

0 members like this

▶ Reply to This

Replies to This Discussion

Permalink Reply by Gaurav Srivastava on January 3, 2010 at 7:08pm

thx Mohan...

▶ Reply

Permalink Reply by Sriya Rajan on January 4, 2010 at 2:29pm

Security testing is a process to determine that an information system protects data and maintains functionality as intended.

The six basic security concepts that need to be covered by security testing are: confidentiality, integrity, authentication, authorization, availability and non-repudiation.

A security measure which protects against the disclosure of information to parties other than the intended recipient that is by no means the only way of ensuring the security.

refer this url: http://csrc.nist.gov/publications/nistpubs/800-42/NIST-SP800-42.pdf