Security Testing

Security Testing spans the need to cover Confidentiality, Integrity, Authentication, Authorization, Availability and Non-Repudiation of any Information System. Today, Security Testing is an indispensable part of Web application development life cycle due to increase in privacy breaches in businesses and organizations.

Testing-whiz embraces the industry standard testing methodology and keeps track of new vulnerabilities. Testing-whiz has repository of reusable Security test cases and gained proficiency in using Security testing tools (open source and industrial standard).Testing-whiz helps to identify business risks that are caused by the security vulnerabilities on in-house developed applications, COTS products or third party applications.

Testing-whiz has expertise in performing security / penetration testing on the web applications. It follows the industry standard guidelines by Open Web Application Security Project (OWASP) and Web Application Security Consortium.

Testing-whiz offers the following Security solutions:

Web application penetration testing
Product security testing
Information Systems Risk Assessments / Security Audit
Security Policy and Process Design
Analyzing security vulnerabilities in the applications
Analyzing security quality of internally developed applications
Ensuring compliance with PCI standards, SOX, and HIPAA
Advice on fixing loopholes and future security vigilance plan
Comprehensive security analysis
Potential security issue coverage

Testing-whiz spans the following in conceptualizing the Test Strategy and Planning :

Areas of focus in application security testing
Security software error model
Common web and software application security errors—including backdoors, exception handling and failure notification, ID/Password and user account handling, information-leak, data tampering, parameter/variable tampering, SQL injection, buffer-overflow, client-side handling/mishandling, crosstie scripting, timing, initial defaults and other errors.
Test planning and strategy process walkthrough
Targeting the user interfaces
Targeting the hidden interfaces
File system interfaces
Operating system interfaces
Application/software component interfaces