Abstract

Technique behind web application security testing

User and critically important company information is managed using web applications. For this
reason, web applications serve as a door for attacks. The vulnerabilities present in the application
can be exploited by an attacker. Even with the rapid development of Internet technologies, web
applications have not achieved the desired security levels. As a result, web servers and web
applications are popular attack targets.
With the large number of highly skilled hackers in the world, security should be a huge
concern for anyone building a web application. We need to test how secure our web application
is from both external and internal threats. The security of our web application should be planned
for and verified by qualified security specialists.
In this section I provide further details about the particular techniques that we have
investigated, including existing approaches and a new approach to test web application with full
protection.

CONTENTS

Page No

Chapter 1

: INTRODUCTION

01

1.1 OBJECTIVE

Chapter 2

WHY SECURITY TESTING

03

1.1.CLASSES OF THREATS
1.3 SECURITY TESTING TECHNIQUES
1.4 SECURITY TESTING APPROACH

Chapter 3

TYPES OF SECURITY TESTING

08

Chapter 4

INTEGRATION OF SECURITY PROCESSES WITH THE SDLC

09

Chapter 5

TYPES OF WEB APPLICATION TESTING

10

1.1FUNCTIONALITY
1.2 USABILITY
1.3 INTERFACE
1.4COMPATIBILITY
1.5PERFORMANCE
1.6SECURITY

Chapter 6 : TEST CASES FOR WEB ELEMENTS

1.1
1.2
1.3
1.4
1.5
1.6

GUI & USABILITY TEST SCENARIOS

TEST SCENARIOS FOR IMAGE UPLOAD FUNCTIONALITY
TEST SCENARIOS FOR SENDING EMAILS
TEST SCENARIOS FOR EXCEL EXPORT FUNCTIONALITY
TEST SCENARIOS FOR SECURITY TESTING
TEST CASE OF DIFFERENT WEB COMPONENTS

15

Page No

Chapter 7

: PENETRATION TESTING

26

Chapter 8 WHAT IS SQL INJECTION AND HOW TO TEST WEB APPLICATION

AGAINST SQL INJECTION ATTACKS
30

Chapter 9
ATTACKS

Chapter 10

: HOW TO TEST WEB APPLICATION AGAINST SQL INJECTION

37

CROSS-SITE SCRIPTING(XSS) ATTACK

43

SUMMERY & FUTURE WORK

58

REFERENCES

59