Live briefing
Everything about Security testing
Finding flaws in the security of information systems
Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and maintain functionality as intended. Due to the logical limitations of security testing, passing the security testing process is not an indication that no flaws exist or that the system adequately satisfies the security requirements. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Security testingA 5-minute orientation
- Skim a recent paper: Metamorphic Testing for Web System SecurityInfluential work since 2022
- Pick up a classic book: Gray Hat HackingThe most-reprinted book on the subject
- Read the landmark paper: SAGE: Whitebox Fuzzing for Security TestingCited 269 times
- Go sideways: Information technology security assessmentA closely related topic
- Go sideways: Penetration testA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
SAGE: Whitebox Fuzzing for Security Testing
Software security testing
Why security testing is hard
Model-Based Security Testing
Cyclic testing of arthroscopic knot security
Model-based Security Testing Using UMLsec
Combinatorial Methods in Security Testing
Security Attack Testing (SAT)—testing the security of information systems at design time
🆕 Influential since 2022
Metamorphic Testing for Web System Security
Adopting security practices in software development process: Security testing framework for sustainable smart cities
Enhancing Mobile Security through Comprehensive Penetration Testing
Enhancing DevSecOps with continuous security requirements analysis and testing
Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing
📚 Books worth reading
Gray Hat HackingShon Harris, Allen Harper · 2004
The Ethical HackJames S. Tiller · 2004
Ethical Hacking and Penetration Testing GuideRafay Baloch · 2014
Penetration tester's open source toolkitJeremy Faircloth · 2006- 📕CISO's guide to penetration testingJames S. Tiller · 2012
Unauthorised accessWil Allsopp · 2009
The Basics of Hacking and Penetration TestingPatrick Engebretson · 2011
The Browser Hacker's HandbookWade Alcorn, Christian Frichot · 2014
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Information technology security assessment Information technology security assessment is a planned evaluation of security controls to determine whether they are implemented correctly, operating…
- Penetration test A penetration test, colloquially known as a pentest, is an authorized simulated cyberattack on a computer system, performed live to evaluate the security…
- Application security Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve…
- OWASP OWASP, the Open Worldwide Application Security Project (formerly Open Web Application Security Project), is an online community that publishes open-source…
- Vulnerability assessment (computing) Vulnerability assessment is a process of defining, identifying and classifying the security holes in information technology systems. An attacker can exploit…
- Software assurance Software assurance (SwA) is a critical process in software development that ensures the reliability, safety, and security of software products. It involves…
- Security controls Security controls, security measures or countermeasurs are safeguards to avoid, detect, counteract, or minimize security risks to physical property, information…
- Web application firewall A Web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service.…