Security Testing Concepts

Study Notes

Malicious Code Detection: Identifies malicious scripts or payloads inserted into the system, compromising data or functionality
Social Engineering: Tests human element of security, identifying vulnerabilities to tactics like phishing, pretexting, or baiting
Cross-Site Scripting (XSS): Compromises user interactions with a vulnerable application, allowing attackers to fully compromise interactions

Vulnerability Scanning: Identifies security weaknesses in a system using automated tools
Software Composition Analysis (SCA): Focuses on identifying vulnerabilities in third-party components and libraries
Penetration Testing/Ethical Hacking: Evaluates security of an IT infrastructure by safely trying to exploit vulnerabilities
- Types:
  - External Testing: Targets assets visible on the internet
  - Internal Testing: Simulates an attack by a malicious insider
  - Blind Testing: Provides real-time insights into an actual application assault
  - Double Blind Testing: Checks real-time responses and breach detection capabilities
  - Targeted Testing: Trains IT staff on defensive tactics

Risk Assessment: Identifies, evaluates, and prioritizes risks associated with information security threats
Security Auditing: Comprehensive evaluation of an organization's information system, measuring adherence to established criteria

Comprehensive evaluation of the security status of an organization's information systems and infrastructure
Provides a snapshot of cybersecurity strengths and weaknesses, informing resource allocation and security improvement priority

OWASP ZAP (Zed Attack Proxy):
- Open-source web application security scanner
- Automated Scanner, Spider, Proxy Server, Active and Passive Scanning, Scripting Support, and Authentication Support
Burp Suite:
- Software security application for penetration testing of web applications
- Includes tools such as Burp Proxy, Burp Spider, Burp Intruder, Burp Scanner, and Burp Repeater