Skip to content

SECURITY_TESTING_GUIDE.md

Latest commit

 

History

History
18 lines (14 loc) · 736 Bytes

SECURITY_TESTING_GUIDE.md

File metadata and controls

18 lines (14 loc) · 736 Bytes

Security Test Guide

1. Dependency Scanning

  • Regularly check for source-code files with changes
  • Check for compatibility and resolve performance issues

2. Penetration Testing

  • Use Kali Linux and Burp Suite to identify vulnerabilities
  • Use Wireshark to check network traffic

3. Dynamic Application Security Testing(DASP)

  • DASP tools are used for identifying security misconfiguration, broken authentication and input/output validation
  • ZED Attack Proxy is an open source tool for security testing provided by OWASP

4. Static Application Security Testing(SAST)

  • Tools help in detecting SQL injections,and other vulnerabilities
  • SonarQube, Fortify are commonly used tools
  • Integrate with IDEs and CI/CD pipelines