Seven Deadliest Web Application Attacks

Creating Robust Test Cases

Once a feature is implemented, it may be passed off to a quality assurance team or run through a series of regression tests. This type of testing typically focuses on concepts such as acceptance testing. Acceptance testing ensures that a feature works the way it was intended. The test scenarios arise from discussions with developers and reflect how something is supposed to work. These tests usually focus on discrete parts of a Web site and assume a particular state going into or out of the test. Many logic-based attacks build on effects that arise from the combination of improper use of different functions. They are not likely to be detected at this phase unless or until a large suite of tests start exercising large ...