[PDF] OWASP Top 10 - 2017 The Open Web Application Security

What is application security testing?

Application security testing requires a specialized set of skills, including both software and security knowledge, that are not typical of security engineers.As a result organizations are of- ten required to security-train their software developers on ethical hacking techniques, security assessment procedures and tools.

What is this technical guide to information security testing and assessment?

Technical guide to information security testing and assessment Author Scarfone, K. A.; Souppaya, M. P.; Cody, A.; Orebaugh, A. D.; Subject The purpose of this document is to assist organizations in planning and conducting technical information security tests and examinations, analyzing findings, and developing mitigation strategies.

What makes a good security test?

Good security testing requires going beyond what is expect - ed and thinking like an attacker who is trying to break the application. Creative thinking can help to determine what unexpected data may cause an application to fail in an insecure manner.

What does a security tester do?

With this information, the tester can retrieve the information from the vendor itself and analyze what vulnerabilities might be present in the archi- tecture and how they can affect the application itself.