Terms used in Security Testing

Terms used in Security Testing



Few terms that are frequently used in web application security testing:



What is “Vulnerability”?

This is a weakness in the web application. The cause of such a “weakness” can be bugs in the application, an injection (SQL/ script code) or the presence of viruses.



What is “URL manipulation”?

Some web applications communicate additional information between the client (browser) and the server in the URL. Changing some information in the URL may sometimes lead to unintended behavior by the server.



What is “SQL injection”?

This is the process of inserting SQL statements through the web application user interface into some query that is then executed by the server.



What is “XSS (Cross Site Scripting)”?

When a user inserts HTML/ client-side script in the user interface of a web application and this insertion is visible to other users, it is called XSS.