Published on Oct 09, 2022

Security Testing is a non-functional software testing. It aims to discover any vulnerabilities in the system and find out that the data and resources of the system are protected from possible violators. It ensures that the software and application are free from any threats or risks that can cause a loss.

Based on that, Security Testing focus in specifics area: Network Security, System Software Security; Client-side Application Security; Server-side Application Security.

All types of Security Testing follow six basic principles:

Vulnerability Scanning: Vulnerability scanning is performed with the help of automated software to scan a system to detect the known vulnerability patterns.

Security Scanning: Security scanning is the identification of network and system weaknesses. Later on, it provides solutions for reducing these defects or risks. Security scanning can be carried out in both manual and automated ways.

Penetration Testing: Penetration testing is the simulation of the attack from a malicious hacker. It includes an analysis of a particular system to examine for potential vulnerabilities from a malicious hacker that attempts to hack the system.

Risk Assessment: In risk assessment testing, security risks observed in the organisation are analysed. Risks are classified into three categories, i.e., low, medium, and high. This testing endorses controls and measures to minimise the risk.

Security Auditing: Security auditing is an internal inspection of applications and operating systems for security defects. An audit can also be carried out via line-by-line checking of code.

Ethical Hacking: Ethical hacking is different from malicious hacking. The purpose of ethical hacking is to expose security flaws in the organisation’s system.

Posture Assessment: It combines security scanning, ethical hacking, and risk assessments to provide an overall security posture of an organisation.

We can use programming tools during the various Security Testing to help us improve our results: