Security Testing Techniques

Discuss the various security testing techniques required to test desktop and web Applications security. “Security testing techniques include a lot many ways to check whether the system is protected from any external threats. One of the techniques is Brute Force attack, the idea behind this technique to prevent the access for a user who attempts to break the password by guessing it. The system tries to match a valid id with a password by repetitive logins. To protect the system against such a threat, account blocking is the one way in which the account is locked for a duration (30 minutes to 24 hours) after a specific number of incorrect attempts. It is very easy to test this type of the security of the application; the tester needs to attempt to login again and again with invalid user Ids or passwords. On the other hand sometimes the hackers use the malicious scripts to manipulate the websites, which is called the SQL injection. To check whether the site is secure or not, a tester need to check the all the input fields to be limited in length and should not accept any script or tag inputs. The input fields should accept some limited special characters.” Software industry is well recognized in this century. Cyber world has become more advanced and dominating in every form of business. Various security techniques are evolved for testing desktop and web applications.Some of them are following:- 1) Access to Application: For both web and desktop applications, security to access is achieved through 'Roles and Management'. For checking this scrutinized testing of entire roles and responsibility is required. 2) Data Protection: Data protection is very important perspective in security. Entire data should be protected through encryption. Tester should use query to inspect the passwords of users, business critical data. 3) SQL Injection and XSS: In this despiteful script is used by hackers to change application. Tester should ensure that utmost lengths of inputs are prescribed. 4) Service Access Points: In today’s world, every business is collaborative process. This type of phenomena is also applicable for application sites. For mutual collaboration, access points are defined for each other. For security cases, access can be locked for redundant elements. In testing point of view, the inter and intra -network access should only be granted to trusted applications. http://www.qainfotech.com/index.html