6

Methodologies for Security Testing

Security testing methodology, also known as penetration testing (pentesting) or vulnerability testing, is a structured and planned approach to evaluating the security of an information system, web application, network, or any other information technology element. The main objective of these tests is to identify and remediate vulnerabilities that could be exploited by malicious attackers.

There are also official methodologies such as the Open Web Application Security Project (OWASP) (https://owasp.org/www-project-web-security-testing-guide/), a guide that’s followed by hundreds of professionals daily to perform security tests on web applications. OWASP is a non-profit foundation. It works to improve security ...

Get Bug Bounty from Scratch now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.