siriatwork

 Profile Answers by siriatwork 

• Nov 25th, 2011

 

Security Testing is the bigger umbrella...if you can drill down to which area you wanna test it might be helpful. On a general note, security testing mainly covers tests related to Authorization and Authentication...

When you test Authentication you would want to see that Users need to be having valid user accts to use the
Application under test

When you test Authorization you would want to see that Users must have appropriate permissions to view the various components of the application under test

mfsi_satyakamm

 Profile Answers by mfsi_satyakamm 

• Jan 24th, 2012

 

Hi,

Security testing can be done manually, but it needs very keen observation to identify the sources of security leaks.
Firebug is a great tool to do security testing manually.

Thanks