Tag Info

New answers tagged

0

On Software Testing: If you sign up for Fortify-On Demand at http://hpfod.com, you will notice that there are a variety of offerings, the primary three being dynamic security analysis, static security analysis, and mobile analysis. A few others such as IBM and Cigital mirror this model. All three of these vendors supply Software-Testing-as-a Service ...


0

A short and sweet answer would be: Software Testing revolves around code review and compliance with secure coding practices. A Penetration Tester utilizes various methods to emulate an attack and fully exploit a target system/network. They're related because a Penetration Tester may gain access to your system through exploitable software(I.e. buffer ...


0

I'll explain in rather simple words by explaining what actually they do. Lets start with penetration testing, as I work as one !! Penetration Testers usually are assigned a project (in your case a web application) to test , They go through the website ,Do some reconnaissance and try to find important functions of the web application e.g. For a Ecommerce ...


2

I'll put a slight different spin on the second part of your question concerning discipline cross-over, since I have experience doing these in my career. A good Penetration Tester has a hacker mindset. They work to defeat what security protections have been put in-place, by whatever creative means available to them and their knowledge set. A good PenTester ...


0

I would say you should view relationships between these 3 types of activities like that: penetration testing is a subtype of security testing which is in turn is a subtype of software testing. Security testing deals with very specific types of defects: security defects; ones that could result in compromised system, ruined reputation and stained public ...



Top 50 recent answers are included