Check list for the Website Security testing.

Replies to This Discussion

Permalink Reply by jai on March 29, 2010 at 2:51pm

From best of my knowledge

Application should use SSL or SHTTP
Application should delete Cookies and Temporary Internet files.
Application should not allow SQL Injection.
Session should not be more than 5 min.
Application should not allow all short cuts, like ctrl+c, ctrl+v, ctrl+s
Application should use encryption algorithm at the time of store in database and decryption algorithm should use at the time of retrieve from the database.

• ▶ Reply

Permalink Reply by Anupama on March 29, 2010 at 4:01pm

Hope this document would be helpful for you.
---
Anupama

Attachments:

• Security_CheckLists.xls, 63 KB

• ▶ Reply

Permalink Reply by Sandip Wagh on March 29, 2010 at 4:14pm

Hi Anupama,

Thank Nice and very important xls file.


--Sandip Wagh

• ▶ Reply

Permalink Reply by Usha Sri on March 29, 2010 at 4:39pm

Thanks Anu for sharing this valuable information.

• ▶ Reply

Permalink Reply by pyla on March 29, 2010 at 5:04pm

HI Anu,

Thanks for provide the important document

those who are in security testing following URL can acees it willget Very Good idea

http://www.owasp.org

please share me your views?

• ▶ Reply

Permalink Reply by Himanshu Patel on March 29, 2010 at 5:53pm

Thanks for the document Anupama

• ▶ Reply

Permalink Reply by Shadab Shaikh on March 29, 2010 at 6:32pm

HEllo Anupama,
THANKS ALOT FOR SHARING THIS DOC.

• ▶ Reply

Permalink Reply by Dipan on March 30, 2010 at 11:26am

Hi Anupama,
I like the most document which you have sent.... I really thankful to you. I am looking forward to you for more help me.

Thanks,
Dipan.

• ▶ Reply

Permalink Reply by pyla on March 29, 2010 at 4:29pm

Please go through the OWASP web site. you will get good idea

• ▶ Reply

Permalink Reply by nprajapati on March 29, 2010 at 6:19pm

Hello Anu,

Nice document...Keep contributing...


Regards,
Nimesh

• ▶ Reply

Permalink Reply by L SRINIVAS DAS on March 29, 2010 at 7:15pm

Hi Anu,

Thanks for the checklist .It will really help the testers to get idea about the scenarios to check .

Once again , thanks and keep posting :)

• ▶ Reply

Permalink Reply by L SRINIVAS DAS on March 29, 2010 at 8:18pm

Hi Anu ,

Adding to the above comment , I have one query related to non - functional testing mentioned in the sheet .

Does Load ,Stress and Volume testing come under Performance testing ?

As per the sheet , Performance testing is divided in to 3 categories : 1.1 LOAD , 1.2VOLUME and 1.3 :STRESS testing

But not sure about the above concept , I think they should be different .

Cheers,
Srinivas

• ▶ Reply

• ‹ Previous
• 1
• 2
• Next ›
• Page