Tag: technology

log should have url accessed by user

Date and time logged in the logs should be in IST format

logs have to be in W3C format

System time is in sync with INDIA domain time and the logs should have uniquely identifiable information about the user

white box testing

black box testing

security testing

vulnerability testing

Release of CR

maintenance of application

release of patch

interim release of CR

Use it for overwriting current logs

Inform stakeholders and degauss the media

Keep it safely and securely in the fire proof safe

format the media

At the design stage

At the beginning of testing phase

During requirements collection phase

HP Webinspect performs the Threat Modeling, I do not need to do anything

MITM proxy can be used to change the URL to a non secured one

If the login page is not SSL enabled, the credentials will be transmitted in plain text to the web server and Attacker can sniff the credentials supplied by the user

Firewall logs will have the credentials in plain text

proxy logs will have the credentials in plain text

During multi-staged login, the application should validate the credentials supplied at each stage only

Hidden variables should be used to remember the previous stage values and current stage supplier credentials to be validated at server end

During multi-staged login, the application should validate the credentials supplied at each stage and previous stages

Credentials supplied at the prevoius stage should be saved in cookie and current stage supplier credentials to be validated at server end

XSS

Reflection Attack

Mirror Attack

XSLT

Dynamic File Attack

Remote File Inclusion

Dynamic Data Attack

Data Dynamics

Static Code Analysis is the analysis of software code by actually executing the binaries resulting from this code

Static Code Analysis is the analysis of software code without actually executing the binaries resulting from this code

Static Code Analysis is the analysis of executables resulting from this code

None of the above