Python Testing

  1. Security-Oriented Testing
    1. The Role of Testing in Application Security
      1. Identifying Security Flaws Early
        1. Supporting Secure Development Practices
          1. Security Testing Integration
          2. Testing for Common Vulnerabilities
            1. Input Validation Testing
              1. Testing for Injection Points
                1. Validating User Input
                  1. Boundary Value Testing
                  2. Authentication and Authorization Testing
                    1. Access Control Testing
                      1. Session Management
                        1. Privilege Escalation
                        2. Error Handling Testing
                          1. Testing Error Messages
                            1. Preventing Information Disclosure
                              1. Exception Security
                              2. Injection Attack Testing
                                1. SQL Injection
                                  1. Command Injection
                                    1. Code Injection
                                  2. Fuzz Testing
                                    1. Concept and Application
                                      1. Generating Random Inputs
                                        1. Detecting Crashes and Failures
                                          1. Mutation-Based Fuzzing
                                          2. Tools for Fuzzing Python Code
                                            1. Using Atheris
                                              1. Integrating with CI
                                                1. Custom Fuzzing Harnesses
                                              2. Static Application Security Testing
                                                1. Linting for Security Issues
                                                  1. Identifying Insecure Patterns
                                                    1. Code Quality Security
                                                    2. Using Tools like bandit
                                                      1. Running Security Scans
                                                        1. Interpreting Results
                                                          1. Custom Security Rules
                                                          2. Dependency Vulnerability Scanning
                                                            1. Known Vulnerability Detection
                                                              1. Dependency Updates
                                                            2. Dynamic Application Security Testing
                                                              1. Principles of DAST
                                                                1. Testing Running Applications
                                                                  1. Simulating Attacks
                                                                    1. Runtime Security Testing
                                                                    2. Integrating DAST tools in the testing phase
                                                                      1. Automating DAST in CI/CD
                                                                        1. Reviewing DAST Reports
                                                                          1. Security Test Automation

                                                                      Previous

                                                                      10. Code Coverage

                                                                      Go to top

                                                                      Next

                                                                      12. Test Data Management