Security Testing

“Si vis pacem, para bellum,” adapted from Publius Flavius Vegetius Renatus

(“If you want peace, prepare for war”)

In the previous chapter, you learned about techniques you can use when performing user experience testing. Although it may not appear as important as the actual functionality of your application, this is a prominent area that has a massive impact on your customers’ experience of your product. Next, we come to another place of testing where the importance may not be immediately obvious but can harbor some of the most severe bugs your application can suffer from – security testing.

Security testing is an extension of functional testing with a specific focus on security issues. There is an overlap with the tests described in previous chapters, such as text field inputs, but here, we will consider specific examples and tests for security-related topics. Security testing aims to ensure the CIA triad of the confidentiality...