SlideShare a Scribd company logo
Testing Web Application Security
     Integrating and automating security testing



Rochester Security Summit
Thu, 29 Oct 2009, 2p-3p
Testing Web Application Security

Web applications are commonly used to transmit, accept and store
data that is personal, company confidential and sensitive.

More enterprises are spending more time testing web applications, but
many still do not integrate security testing into an application's overall
test plan.

In this session, we will explore ways to

   integrate security testing into an end-to-end test plan,
   exercise security features in
       unit tests
       integration tests
       acceptance tests
http://www.slideshare.net/ted.husted
http://www.slideshare.net/RafalLos/creating-practical-security-testcases-for-web-applications
http://www.slideshare.net/RafalLos/creating-practical-security-testcases-for-web-applications
http://www.slideshare.net/RafalLos/creating-practical-security-testcases-for-web-applications
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Bridging the Divide

Client-Side Capabilies      Server-Side Capabilities
    Length                     Filters
    Input value                Numeric Limits
    Input transfer             Character patterns
    Data access                    (email, URLs, SKUs)
    Input field selection
    Control flow
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Open QA Selenium




  http://selenium.openqa.org/documentation/
Open QA Selenium

 Selenium is a suite of tools




  http://selenium.openqa.org/documentation/
Open QA Selenium

 Selenium is a suite of tools
 Selenium IDE
    records and runs tests




  http://selenium.openqa.org/documentation/
Open QA Selenium

 Selenium is a suite of tools
 Selenium IDE
    records and runs tests
 Selenium Remote Control
    runs across multiple platforms




  http://selenium.openqa.org/documentation/
Open QA Selenium

 Selenium is a suite of tools
 Selenium IDE
    records and runs tests
 Selenium Remote Control
    runs across multiple platforms
 Selenium Grid
    runs across multiple machines




  http://selenium.openqa.org/documentation/
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
Testing Web Application Security
f:
cd "F:optselenium-remote-control-1.0-beta-2selenium-server-1.0-
beta-2"
java -jar selenium-server.jar
Testing Web Application Security
> java -jar hudson.war
Testing Web Application Security
Testing Web Application Security
Time for a Test Drive ...
Please complete
 an evaluation.
Questions?

More Related Content

PPT
Get Ready for Web Application Security Testing
PPTX
Security testing
PDF
we45 - Web Application Security Testing Case Study
PDF
The Complete Web Application Security Testing Checklist
PPS
Security testing
PDF
Web Application Security Testing Tools
PPTX
Security Testing
PPTX
Security Testing for Web Application
Get Ready for Web Application Security Testing
Security testing
we45 - Web Application Security Testing Case Study
The Complete Web Application Security Testing Checklist
Security testing
Web Application Security Testing Tools
Security Testing
Security Testing for Web Application

What's hot (20)

PDF
Web Application Security 101
PPT
Step by step guide for web application security testing
PDF
Security testing presentation
PDF
Introduction to Application Security Testing
PPTX
Security Testing Training With Examples
PPT
Security Testing
PDF
Web Application Security 101 - 04 Testing Methodology
PPTX
Web Application Security 101
PPT
Web Application Security
PPTX
Web application vulnerability assessment
PDF
Owasp top 10
PDF
Web Application Security and Awareness
PPTX
Secure Coding 2013
PPTX
PPTX
Web application security
PPTX
A new web application vulnerability assessment framework
PPTX
Owasp top 10 2017
PPTX
Penetration Testing
PPT
Web Application Security Testing
PPT
Introduction to Web Application Penetration Testing
Web Application Security 101
Step by step guide for web application security testing
Security testing presentation
Introduction to Application Security Testing
Security Testing Training With Examples
Security Testing
Web Application Security 101 - 04 Testing Methodology
Web Application Security 101
Web Application Security
Web application vulnerability assessment
Owasp top 10
Web Application Security and Awareness
Secure Coding 2013
Web application security
A new web application vulnerability assessment framework
Owasp top 10 2017
Penetration Testing
Web Application Security Testing
Introduction to Web Application Penetration Testing
Ad

Viewers also liked (20)

PPTX
Testing web application
PPTX
Web Application Testing
PPT
Test strategy for web development
PDF
Lab 7b) test a web application
PPTX
Experience Report in #DEWT5: Where is test strategy with an agile team
PPT
Methods to test an e-learning Web application.
PDF
Database Web Application User Test 2
PPTX
Testing strategy for agile projects updated
PPTX
Getting Ready for UAT
PDF
Testing Web Applications
PPTX
The Three Pillars Approach to Your Agile Test Strategy
PDF
Agile 2012 the 0-page agile test plan - paul carvalho
PDF
How to brew a tasty agile test strategy
PPTX
Test Strategy
PPTX
Designing Agile Test Strategy for Mobile Apps By Parimala Hariprasad
PDF
Building a Test Automation Strategy for Success
PPT
Jarian van de Laar - Test Policy - Test Strategy
PPTX
Agile tour ncr test360_degree - agile testing on steroids
PPT
AJRA Test Strategy Discussion
DOC
Niyati_Manual_Testing_ISTQB_Certified_Resume
Testing web application
Web Application Testing
Test strategy for web development
Lab 7b) test a web application
Experience Report in #DEWT5: Where is test strategy with an agile team
Methods to test an e-learning Web application.
Database Web Application User Test 2
Testing strategy for agile projects updated
Getting Ready for UAT
Testing Web Applications
The Three Pillars Approach to Your Agile Test Strategy
Agile 2012 the 0-page agile test plan - paul carvalho
How to brew a tasty agile test strategy
Test Strategy
Designing Agile Test Strategy for Mobile Apps By Parimala Hariprasad
Building a Test Automation Strategy for Success
Jarian van de Laar - Test Policy - Test Strategy
Agile tour ncr test360_degree - agile testing on steroids
AJRA Test Strategy Discussion
Niyati_Manual_Testing_ISTQB_Certified_Resume
Ad

Similar to Testing Web Application Security (20)

PDF
Automate Web Apps With Selenium
PPT
Testing Ajax Web Applications
PDF
Leveraging Open Source Automation: A Selenium WebDriver Example
PPTX
Penetration testing dont just leave it to chance
DOCX
Software Testing Tools Training
PDF
AppSec Tel Aviv - OWASP Top 10 For JavaScript Developers
PPTX
Selenium
PDF
2013 10-10 selenium presentation to ocjug
PPT
Selenium-Webdriver With PHPUnit Automation test for Joomla CMS!
PPT
Selenium
PPTX
test-automation-selenium-160216124839.pptx
PPT
Selenium Presentation at Engineering Colleges
PDF
Automation Using Selenium Webdriver
PDF
Designing keyword and Data Driven Automation framework with Selenium
PPTX
Test Automation
PDF
Selenium Automation Testing - A Complete Guide.pdf
PPT
Selenium
PDF
Ijetcas14 413
PDF
Selenium Automation Testing - A Complete Guide.pdf
Automate Web Apps With Selenium
Testing Ajax Web Applications
Leveraging Open Source Automation: A Selenium WebDriver Example
Penetration testing dont just leave it to chance
Software Testing Tools Training
AppSec Tel Aviv - OWASP Top 10 For JavaScript Developers
Selenium
2013 10-10 selenium presentation to ocjug
Selenium-Webdriver With PHPUnit Automation test for Joomla CMS!
Selenium
test-automation-selenium-160216124839.pptx
Selenium Presentation at Engineering Colleges
Automation Using Selenium Webdriver
Designing keyword and Data Driven Automation framework with Selenium
Test Automation
Selenium Automation Testing - A Complete Guide.pdf
Selenium
Ijetcas14 413
Selenium Automation Testing - A Complete Guide.pdf

More from Ted Husted (18)

PPTX
Ship It!
PDF
.NET @ apache.org
PDF
The secret life_of_open_source
PDF
Open Source Secret Sauce - Lugor Sep 2011
PDF
NU FaceBook 101 JCC 2010
PDF
Developing java Web Applications Using Google Apps RJUG 2011
PDF
Open source secret_sauce_apache_con_2010
PDF
Drupal kickstart-workshop
PDF
Open source-secret-sauce-rit-2010
PDF
Agile Analysis with Use Cases: Balancing Utility with Simplicity
PDF
API Doc Smackdown
PDF
Testing The Testers
PDF
Testing Ajax Applications
PDF
Testing Tools
PDF
Coding Ajax
PDF
Coding Ajax
PPT
Retrofitting
PDF
Open Source Secret Sauce
Ship It!
.NET @ apache.org
The secret life_of_open_source
Open Source Secret Sauce - Lugor Sep 2011
NU FaceBook 101 JCC 2010
Developing java Web Applications Using Google Apps RJUG 2011
Open source secret_sauce_apache_con_2010
Drupal kickstart-workshop
Open source-secret-sauce-rit-2010
Agile Analysis with Use Cases: Balancing Utility with Simplicity
API Doc Smackdown
Testing The Testers
Testing Ajax Applications
Testing Tools
Coding Ajax
Coding Ajax
Retrofitting
Open Source Secret Sauce

Recently uploaded (20)

PDF
Per capita expenditure prediction using model stacking based on satellite ima...
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PPTX
MYSQL Presentation for SQL database connectivity
PPTX
Cloud computing and distributed systems.
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PPTX
sap open course for s4hana steps from ECC to s4
PDF
Empathic Computing: Creating Shared Understanding
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
Assigned Numbers - 2025 - Bluetooth® Document
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
Electronic commerce courselecture one. Pdf
PPTX
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
PPTX
Programs and apps: productivity, graphics, security and other tools
PPTX
Big Data Technologies - Introduction.pptx
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
Per capita expenditure prediction using model stacking based on satellite ima...
Reach Out and Touch Someone: Haptics and Empathic Computing
MYSQL Presentation for SQL database connectivity
Cloud computing and distributed systems.
Advanced methodologies resolving dimensionality complications for autism neur...
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
Mobile App Security Testing_ A Comprehensive Guide.pdf
sap open course for s4hana steps from ECC to s4
Empathic Computing: Creating Shared Understanding
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
The Rise and Fall of 3GPP – Time for a Sabbatical?
Assigned Numbers - 2025 - Bluetooth® Document
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Electronic commerce courselecture one. Pdf
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
Programs and apps: productivity, graphics, security and other tools
Big Data Technologies - Introduction.pptx
“AI and Expert System Decision Support & Business Intelligence Systems”
Building Integrated photovoltaic BIPV_UPV.pdf

Testing Web Application Security