Testing for Security in the Age of Ajax Programming
- Introduction
- It's in the Code
- Thinking like a Hacker
Thinking like a Hacker
It seems likely that Web applications using Ajax programming are the future of web development. The robust user interface that web pages comprised of Ajax programming can provide represents a huge leap in usability over traditional web pages. But, this power comes with a price: the programmers and QA engineers must move beyond browsers alone when testing the application. Security vulnerabilities can lurk in code that is accessible only by specialized low-level request tools. Hackers will be more than willing to use these tools against your web applications, so your QA team must use the same tactics to find the vulnerabilities first.
You might also like...
About the author
Bryan Sullivan
Bryan Sullivan is a development manager at SPI Dynamics, a Web application security products company. Bryan manages the
Interested in writing for us? Find out more.
Security books
-
Experiences of Test Automation: Case Studies of Software Test Automation
Software test automation has moved beyond a luxury to become a necessity. Applications and systems have grown ever larger and more complex, and manual testing simply cannot keep up. As technology changes, and more organizations move into agile develo...
Security forum discussion
-
Best security system for laptop
by maha.k47825 (0 replies)
-
USB Drive Activity Logger!
by coque0912 (7 replies)
-
Software development company GroupBWT
by alexthunders01 (0 replies)
-
The requested URL was not found on this server
by haulexgem (0 replies)
-
The requested URL was not found on this server
by haulexgem (0 replies)
Security podcasts
-
Hanselminutes: Understanding BDD and NSpec with Matt Florence and Amir Rajan
Published 9 years ago, running time 0h34m
Scott sits down with NSpec authors Matt Florence and Amir Rajan to talk about Behavior Driven Development (BDD). Where does one start with BDD? Is BDD just TDD with a fancier name or can it really chance how you design software? The NSpec guys set Scott on the right path.
Security jobs
-
RoR Developer @ Wimdu
Wimdu GmbH in Berlin, Germany
Comments