Showing posts with label software testing. Show all posts
Showing posts with label software testing. Show all posts

How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD Review

How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book and CD
Average Reviews:

(More customer reviews)
Are you looking to buy How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD? Here is the right place to find the great deals. we can offer discounts of up to 90% on How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD. Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD ReviewI recently finished reading How to Break Web Software: Functional and Security Testing of Web Applications and Web Services by Mike Andrews and James A. Whittaker. I, like many of you, develop web software for a living. I've always taken security seriously and occasionally sneered when I ran across examples of common mistakes. Having said that, this book was an eye opener for me.
The book covers common exploits such as bypassing input validation, SQL injection, and denial of service. There were also several types of attacks I hadn't really considered before. I won't list them here because someone would undoubtedly say, "I can't believe he didn't know about that one!" The authors cover 24 different types of attacks in all. The book also includes coverage of web privacy issues and security related to web services.
Finally, as icing on the cake, a CD is included that contains many tools that will find permanent spots in your arsenal. There are tools to do things like scan web servers for common exploits, mirror sites for local analysis, and check SSL cipher strengths. My favorites are the local proxies that will allow you to view and modify posts as they travel from the client and the server. I always knew I could do this, but didn't know how easy it is. The CD also contains the source code of an example site that includes many flaws for you to practice.
This book is written for software professionals to help them put the hackers out of business. So, it necessarily includes hacker techniques. If you develop or test web software, you should read this book before the hackers do. :-)How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD OverviewSince its early days as an information exchange tool limited to academe, researchers, and the military, the web has grown into a commerce engine that is now omnipresent in all facets of our lifes. More websites are created daily and more applications are developed to allow users to learn, research, and purchase online. As a result, web development is often rushed, which increases the risk of attacks from hackers. Furthermore, the need for secure applications has to be balanced with the need for usability, performance, and reliability. In this book, Whittaker and Andrews demonstrate how rigorous web testing can help prevent and prepare for such attacks. They point out that methodical testing must include identifying threats and attack vectors to establish and then implement the appropriate testing techniques, manual or automated.

Want to learn more information about How to Break Web Software: Functional and Security Testing of Web Applications and Web Services. Book & CD?

>> Click Here to See All Customer Reviews & Ratings Now
Read More...

Selenium 1.0 Testing Tools: Beginner's Guide Review

Selenium 1.0 Testing Tools: Beginner's Guide
Average Reviews:

(More customer reviews)
Are you looking to buy Selenium 1.0 Testing Tools: Beginner's Guide? Here is the right place to find the great deals. we can offer discounts of up to 90% on Selenium 1.0 Testing Tools: Beginner's Guide. Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

Selenium 1.0 Testing Tools: Beginner's Guide ReviewVery good book. User needs to know how to set up Java environment for more advanced testing. This is a book about Selenium, not Java, so that is not really a problem.Selenium 1.0 Testing Tools: Beginner's Guide OverviewWritten with a fast-paced but friendly and engaging approach, this Packt Beginner's Guide is designed to be placed alongside the computer as your guide and mentor. Step-by-step tutorials are bolstered by explanations of the reasoning behind what you are doing. You will quickly pick up the necessary skills, tips, and tricks for creating successful tests for your web applications with practical examples that help you to learn by experiment and play. If you are a Software quality assurance professional, software project manager, or software developer interested in developing automated testing in web based applications, then this book is definitely for you.

Want to learn more information about Selenium 1.0 Testing Tools: Beginner's Guide?

>> Click Here to See All Customer Reviews & Ratings Now
Read More...