More Related Content
Similar to Introduction to security testing raj (20)
![529 owasp top 10 2013 - rc1[1]](https://cdn.slidesharecdn.com/ss_thumbnails/529owasptop10-2013-rc11-140124144020-phpapp02-thumbnail.jpg?width=560&fit=bounds)
![529 owasp top 10 2013 - rc1[1]](https://cdn.slidesharecdn.com/ss_thumbnails/529owasptop10-2013-rc11-140124144158-phpapp02-thumbnail.jpg?width=560&fit=bounds)
Introduction to security testing raj
- 1. Introduction to Security Testing Prepared By Rajakrishnan Sadasivan, MCA MBA PMP CSM ITIL ISTQB(Advanced)
- 2. What is Security Testing ā¢ Security testing is a process intended to reveal flaws in the security mechanisms of an information system that protect data and maintain functionality as intended. (Wikipedia). ā¢ Security Testing is the process of identifying the vulnerabilities and use that vulnerability to penetrate to the application to identify the impact of it.
- 3. Elements of Security Testing Confidentiality disclosure of information to parties other than the intended recipient Integrity protecting information from being modified by unauthorized parties Authentication It involves confirming the identity of a person Availability Information must be kept available to authorized persons when they need it. Authorisation The process of determining that a requester is allowed to receive a service or perform an operation Ex: Access Control/Roles Non-reputation Non-repudiation is a way to guarantee that the sender of a message cannot later deny having sent the message and that the recipient cannot deny having received the message.
- 4. Security Testing Process Analysis & Planning Vulnerability Scanning Vulnerability Assessment Penetration (Attack) Test Report *Source: Created by Raj
- 5. Security Testing Process Process Description Analysis and Planning It is the phase where the security tester/Organisation gather information about the items under test such as application, Infrastructure, company security policy etc. A security test plan will be derived based on the analysis Vulnerability Scanning Vulnerability scanning will be done to identify the vulnerable points both application level and network level Vulnerability Assessment Vulnerability Assessment will be performed based on the vulnerability scanning result to summaries the possible vulnerable areas Penetration (Attack) Security tester tries to penetrate through the vulnerable points to identify the impact of it Test Report Penetration test report will be generated
- 6. Types of Security Testing ā¢ Static Application Security Testing(SAST) ā¢ SAST includes application security testing to identify the vulnerabilities of the application and test the impact of such vulnerabilities by trying to penetrate through those vulnerabilities in code level ā¢ It is usually done by developers ā¢ It is done with Open source Or commercial tools ā¢ Dynamic Application Security Testing (DAST) ā¢ DAST includes application security testing to identify the vulnerabilities of the application and test the impact of such vulnerabilities by trying to penetrate through those vulnerabilities ā¢ It is usually done from inside the network ā¢ It is done with Open source Or commercial tools ā¢ Penetration Testing(PEN) ā¢ Penetration testing typically includes network penetration testing and application security testing as well as controls and processes around the networks and applications ā¢ It is more comprehensive than DAST ā¢ It is done both from inside and outside the network ā¢ It is mostly done with powerful commercial tools ā¢ Vulnerability Assessment vs PEN Testing ā¢ A vulnerability assessment simply identifies and reports noted vulnerabilities, whereas a penetration test attempts to exploit the vulnerabilities to determine whether unauthorized access or other malicious activity is possible.
- 7. Best Practices ā¢ Security testing will be conducted in an isolated environment which is similar to production environment setup ā¢ Testing to be conducted from both internal and external networks ā¢ Database backups to be taken before PEN TEST starts
- 8. OWASP ā¢ Open Web Application Security Project(OWASP) ā¢ The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software ā¢ It is an online community, produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security ā¢ OWASP Top Ten regularly published every year which list the top 10 vulnerabilities for the web application
- 9. OWASP TOP 10- 2018 Top 10 Description Injection Injection flaws, such as SQL, NoSQL, OS, and LDAP injection, occur when untrusted data is sent to an interpreter as part of a command or query. The attackerās hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization. Broken Authentication Application functions related to authentication and session management are often implemented incorrectly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other usersā identities temporarily or permanently. Sensitive Data Exposure Many web applications and APIs do not properly protect sensitive data, such as financial, healthcare, and PII. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Insufficient Logging & Monitoring Insufficient logging and monitoring, coupled with missing or ineffective integration with incident response, allows attackers to further attack systems, maintain persistence, pivot to more systems, and tamper, extract, or destroy data. Broken Access Control Restrictions on what authenticated users are allowed to do are often not properly enforced. Attackers can exploit these flaws to access unauthorized functionality and/or data, such as access other users' accounts, view sensitive files, modify other usersā data, change access rights, etc.
- 10. OWASP TOP 10- 2018 Top 10 Description Security Misconfiguration Security misconfiguration is the most commonly seen issue. This is commonly a result of insecure default configurations, incomplete or ad hoc configurations, open cloud storage, misconfigured HTTP headers, and verbose error messages containing sensitive information. Not only must all operating systems, frameworks, libraries, and applications be securely configured, but they must be patched and upgraded in a timely fashion. Cross-Site Scripting (XSS) XSS flaws occur whenever an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user-supplied data using a browser API that can create HTML or JavaScript. XSS allows attackers to execute scripts in the victimās browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites. Insecure Deserialization Insecure deserialization often leads to remote code execution Using Components with Known Vulnerabilities Components, such as libraries, frameworks, and other software modules, run with the same privileges as the application. Applications and APIs using components with known vulnerabilities may undermine application defenses and enable various attacks and impacts. Insufficient Logging & Monitoring Insufficient logging and monitoring, coupled with missing or ineffective integration with incident response, allows attackers to further attack systems, maintain persistence, pivot to more systems, and tamper, extract, or destroy data.
- 11. Security Testing Tools ā¢ Open source Tools ā¢ DAST ā¢ OWASP ZAP ā¢ https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project ā¢ SAST ā¢ SonarQube ā¢ https://www.owasp.org/index.php/OWASP_SonarQube_Project ā¢ Reference ā¢ https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools
- 12. References ā¢ www.Wikipedia.org ā¢ https://www.veracode.com ā¢ https://www.owasp.org/index.php/Main_Page ā¢ https://www.owasp.org/index.php/Category:Vulnerability_Scanning_ Tools ā¢ https://www.owasp.org/images/7/72/OWASP_Top_10- 2017_%28en%29.pdf.pdf