Web applications have their own quality and security issues that software developers and testers need to be aware of. These techniques and tools can help you find flaws and vulnerabilities before the bad guys do.
Security is critical when operating a Web application. Black, gray and white box tests are three tests you can conduct to ensure an attacker can't get to your application. Learn what the differences are in this tip from Denim Group's Dan Cornell.
Web application security testing checklist
TIP :Testing your Web application security is something that needs be taken seriously. The best way to be successful is to prepare ...
>>
Ways to automate SQL injection testing
TIP :Manual testing for SQL injection requires much effort with little guarantee that you'll find every vulnerability. Run ...
Find Ajax security flaws using tests
TIP :Ajax, JavaScript, RSS technology and Active X are all client-side active content that needs to be manually tested. Andres ...
The importance of input validation
TIP :Web applications are vulnerable if you don't practice input validation. Learn how to prevent application attacks such as ...
>>
How to test Web site login security
TIP :Input validation is critical for the security of Web sites. Here's a techniques you can use to make sure your site isn't ...
ASP.NET security tools and techniques
ASK THE EXPERTS :I work at a state university with small IT budgets. We need to find the best tools to scan for Web vulnerabilities and also ...
>>
Code analysis: Which tool is right for you?
ASK THE EXPERTS :We're in the market for a code scanner or some sort of code analysis tool. What kinds of features should we look for?
Manual vs. automated penetration testing
ASK THE EXPERTS :I have a vague understanding of the differences between manual and automated penetration testing, but I don't know which ...
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.