Test objects involved in safety test

 Key points of safety testing ：  Data flow , Input and output 

 Test object ： The server 、 database 、 Third party services and interfaces 、web Applications 

1. Application deployment environment （ The server ）

The strength of the operating system user name and password Operating system users
User groups and permission settings
System vulnerabilities and patches
Application deployment environment directory and file security
Firewall and network port settings

2. database

Database server version and vulnerability
User name and password settings
User permission settings and authorization settings of the database
Database server port and network connection settings

3.web Application security testing

sql Inject
Form vulnerability
cookie cheating
session test
Log file test
Cross Station attack
Authentication and session attacks
Unsafe object direct reference attack

4. Third party services and interfaces

Service system version and vulnerabilities
Security configuration test
Data transmission security test
Data legitimacy test Data integrity test