Knowledge Share -

Security Testing
            Security testing involves the testing of Software in order to identify any flaws ad gaps from security and vulnerability point of view. Following are the main aspects which Security testing should ensure:
·         Confidentiality.
·         Integrity.
·         Authentication.
·         Availability.
·         Authorization.
·         Non-repudiation.
·         …

[ Full reading ]

1.differentiate between QA and QC?
QA:It is process oriented
it envolve in entire process of software developement.
Preventin oriented.
QC:
It is product oriented.
work to examin the quality of product.
Dedection orientd.

2.what is a bug?
A computer bug is an error, flaw, mistake, failure, or fault in a computer program that prevents it from working correctly or …

[ Full reading ]

Define Bug Life Cycle? What is Metrics?
When we find out the bug, we will put into the “open” status. After fixing the bug developer change the status as “fixed”. Again we will test the fixed part, if there is no bug, change the bug status as “Closed” other wise change the bug status as “Reopen”.
A s/w metric defines the a standard method of measuring certain attributes of the process or the …

[ Full reading ]

Q - What is a 'walkthrough'?
A 'walkthrough' is an informal meeting for evaluation or informational purposes. Little or no preparation is usually required.

Q - What makes a good test engineer?
A good test engineer has a 'test to break' attitude, an ability to take the point of view of the customer, a strong desire for quality, and an attention to detail. Tact and diplomacy are useful in …

[ Full reading ]

Q - What are test case formats widely use in web based testing?
A - Web based applications deal with live web portals. Hence the test cases can be broadly classified as - front end , back end, security testing cases, navigation based, field validations, database related cases. The test cases are written based on the functional specifications and wire-frames.

Q - How to prepare test case and …

[ Full reading ]

5. What are the most important steps you would recommend for securing a new web server? Web application?

Goal of question – Once again, there is no right or wrong answer, however we are interested in what the applicant views as important.

Web Server Security:
• Update/Patch the web server software
• Minimize the server functionality – disable extra modules
• Delete default data/scripts
…

[ Full reading ]

3. What do you see as challenges to successfully deploying/monitoring web intrusion detection?

Goal of question – We are attempting to see if the applicant has a wide knowledge of web security monitoring and IDS issues such as:

• Limitations of NIDS for web monitoring (SSL, semantic issues with understanding HTTP)
• Proper logging – increasing the verboseness of logging (Mod_Security audit_log)
…

[ Full reading ]

Web Security Interview Questions
The goal of this document is to provide appropriate questions for HR/Managers to pose to individuals who are applying for web security related positions. These questions do not have right or wrong answers, but rather spark relevant conversation between the applicant and the hiring staff.

Entry Level Questions

1. What do you see as the most critical and current …

[ Full reading ]

1. What Technical Environments have you worked with?
Ans) Java, .NET, include the testing environment that u worked with..
2. Have you ever converted Test Scenarios into Test Cases?
Ans) Yes, define a suite of test scenarios, develop test cases that will validate the scenarios, and create test data to support the test cases
3. What is the ONE key element of 'test case'?
4. What is the ONE …

[ Full reading ]