Software Testing
Software security analysis using automated tools.
Do not analyze either the source code or the
compiled application. Eg. Buffer overflow
Static Testing
Analyze daily operations and review possible attacks to
apply countermeasures.
OPSEC process
Evaluate threats against applications or operating
systems.
STRIDE
Network traffic capture
Network Flow
Test externally without testing internal structure
Black-box testing
Analyze and test using running environment. Use
to test software provided by third parties where no
access to software code. Eg. cross-site scripting,
SQL injection
Dynamic Testing
Testing of network security in view of a hacker.
Pen-test
Use of false identity to gain access to system identity.
Can use IP/ MAC address, usernames, wireless network
SSIDs.
Spoofing
Events related to hardware device login and access
Audit logging
Test code in run time
Dynamic Testing
Type of dynamic testing which use specific inputs
to detect flaws under stress/load. Eg. input invalid
parameters to test
Fuzz Testing
Check any port or port range open in a computer.
Port scanner
Cause unauthorized modifications of data in transit or in storage. Results in violation of integrity as well as availability.
Tampering
Should synchronize across entire network to have correct and consistent time in logs and device traffic flows.
Network Time Protocol (NTP)
Detailed testing by accessing code and internal structure
White-box testing
Transfer of data and control between program
interfaces.
Integration Level Testing
Verify software meets security requirements.
Operational assurance
Deny an action or activity carried out by an attacker.
Repudiation
Device event message log standard
Syslog
Common Vulnerability and Exposures dictionary
CVE
Verify system has all the required specifications
and functions.
System Level Testing
Processes running in internal protected ring.
Supervisor mode
Attack result in increase the level privileges for a limited user account.
Elevation of privilege
Errors, Warnings, Information, Success Audits, Failure
Event types
Test using two or more components together
Integration Testing