Sample test case scenarios

In this section, I have tried to enumerate some sample test cases that are interesting from the security perspective. They are in no particular order and you may use them as a reference when identifying test cases for your particular use case.

Testing on the server

The mobile ecosystem is very interesting; it is young and still evolving. The application may want to send a piece of data to the server but what is received on the server may be quite different. This could be because of issues in the communication channel where a hacker snoops in and changes the content as it moves or it could be a bad client. No matter what the reason is, it is not enough to test the application only, server testing is critical for the security of your application. These tests focus on whether what was intended is received on the server side, if PII is stored in clear on the server, if business logic is residing on the client then is it working properly. We discussed this in Chapter...