Types of Security Testing

Question

What are the different types of security testing?

Answer 1

We have a fairly complete list, which is discussed in the "Exchange Stack Security" section here and here .

Discovery

The purpose of this step is to identify systems within the scope and services used. It is not intended to detect vulnerabilities, but version detection may indicate outdated versions of software / firmware and, thus, indicate potential vulnerabilities.

Vulnerability Scan

, . . , , (, ).

. , , .

, , . , , , .. ​​ , , .

. . , . , , , , / . , .

Audit/Risk, . , ( , , ).

, . , , / . ( , , , )

Answer 2

• - , .
• - .
• - .
• - , , .
• - , .

Answer 3

• - .

• - , /. . .

• - , .

• . / . .

• - , , , , .

• . , , .

.

Answer 4

, :

• -: , , , , , .. .

• : , , ,

• Cookie Stealing:

• : , .

• : , unauthori

• Priority Escalation: Hack the identifiers of older people and abuse.