Articles by gotowebs

This last section for module 6 of our CSSLP Tutorial is about making sure we understand a few certain terms associated with the principles of product acceptance. This is especially as associated with product acceptance by the […]

Module 6 is the next section.  It is where we are now talking about the element of secure software acceptance.  What we are basically trying to do is get the customer to sign-off for our […]

As we wrap up module 5, we find that we’ve done quite a few things already.  We’ve looked at vulnerabilities, performed our scans, penetration testing, found some of the vulnerabilities, exploited those vulnerabilities, and found […]

So, as move into the security testing, first of all we look at two main types of testing: White Box testing and the black box testing.  We will next talk about security testing. The security […]

Previously, we looked at whether the system functions like it’s supposed to and now we’re going to be looking into more of the non functional testing aspects.  We are looking at answering such questions as […]

This section is about the various types of testing.  There are four major types of testing. For example, there are functional, non-functional, other, and security testing.  In overview, functional testing is more about how the […]

This section is about the testing of artifacts that are created during the process of creating software. So when we are talking about artifacts, we are talking about the various elements that are produced by […]

Now when we go into part 5, we go into areas of secure software testing. This section for module 5 isn’t terribly huge but there are lots of important aspects. So, the first thing to […]

In this module, we ‘ve looked at the threats, potential issues that comes with our applications.  Whether it be web-based applications or those for proprietary processes and procedures, either case, not only is the threat […]

On the OWASP top ten list, there are several threats and vulnerabilities which we haven’t uncovered yet in our discussions.  These all range from ways that sensitive data can be exposed, modifying information in the […]