Python Testing

11.

Security-Oriented Testing

11.1.

The Role of Testing in Application Security

11.1.1.

Identifying Security Flaws Early

11.1.2.

Supporting Secure Development Practices

11.1.3.

Security Testing Integration

11.2.

Testing for Common Vulnerabilities

11.2.1.

Input Validation Testing

11.2.1.1.

Testing for Injection Points

11.2.1.2.

Validating User Input

11.2.1.3.

Boundary Value Testing

11.2.2.

Authentication and Authorization Testing

11.2.2.1.

Access Control Testing

11.2.2.2.

Session Management

11.2.2.3.

Privilege Escalation

11.2.3.

Error Handling Testing

11.2.3.1.

Testing Error Messages

11.2.3.2.

Preventing Information Disclosure

11.2.3.3.

Exception Security

11.2.4.

Injection Attack Testing

11.2.4.1.

11.2.4.2.

Command Injection

11.2.4.3.

11.3.

11.3.1.

Concept and Application

11.3.1.1.

Generating Random Inputs

11.3.1.2.

Detecting Crashes and Failures

11.3.1.3.

Mutation-Based Fuzzing

11.3.2.

Tools for Fuzzing Python Code

11.3.2.1.

11.3.2.2.

Integrating with CI

11.3.2.3.

Custom Fuzzing Harnesses

11.4.

Static Application Security Testing

11.4.1.

Linting for Security Issues

11.4.1.1.

Identifying Insecure Patterns

11.4.1.2.

Code Quality Security

11.4.2.

Using Tools like bandit

11.4.2.1.

Running Security Scans

11.4.2.2.

Interpreting Results

11.4.2.3.

Custom Security Rules

11.4.3.

Dependency Vulnerability Scanning

11.4.3.1.

Known Vulnerability Detection

11.4.3.2.

Dependency Updates

11.5.

Dynamic Application Security Testing

11.5.1.

Principles of DAST

11.5.1.1.

Testing Running Applications

11.5.1.2.

Simulating Attacks

11.5.1.3.

Runtime Security Testing

11.5.2.

Integrating DAST tools in the testing phase

11.5.2.1.

Automating DAST in CI/CD

11.5.2.2.

Reviewing DAST Reports

11.5.2.3.

Security Test Automation

Previous

10. Code Coverage

Go to top

Next

12. Test Data Management