Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Practical Security Automation and Testing

You're reading from   Practical Security Automation and Testing Tools and techniques for automated security scanning and testing in DevSecOps

Arrow left icon
Product type Paperback
Published in Feb 2019
Publisher Packt
ISBN-13 9781789802023
Length 256 pages
Edition 1st Edition
Languages
Tools
Arrow right icon
Author (1):
Arrow left icon
Tony Hsiang-Chih Hsu Tony Hsiang-Chih Hsu
Author Profile Icon Tony Hsiang-Chih Hsu
Tony Hsiang-Chih Hsu
Arrow right icon
View More author details
Toc

Table of Contents (19) Chapters Close

Preface 1. The Scope and Challenges of Security Automation FREE CHAPTER 2. Integrating Security and Automation 3. Secure Code Inspection 4. Sensitive Information and Privacy Testing 5. Security API and Fuzz Testing 6. Web Application Security Testing 7. Android Security Testing 8. Infrastructure Security 9. BDD Acceptance Security Testing 10. Project Background and Automation Approach 11. Automated Testing for Web Applications 12. Automated Fuzz API Security Testing 13. Automated Infrastructure Security 14. Managing and Presenting Test Results 15. Summary of Automation Security Testing Tips 16. List of Scripts and Tools 17. Solutions 18. Other Books You May Enjoy

Case study – website privacy inspection

Here we will look at how to identify vulnerabilities in private information when a web service goes live.

The insecure design of a website may result in the leaking or interception of private information. One of the most common ways in which information leakage can occur is by the use of insecure communication protocols, such as HTTP, Telnet, or FTP. These protocols are communicating messages without any encryption. The web administrator will need an automatic privacy scanning tool to do see whether this is an issue affecting them.

Here we introduce the use of PrivacyScore. It provides the following privacy inspections:

Privacy scan scenarios

Examples

No Track:

No Browsing histories tracked by websites and third parties

  • Checks whether third-party embeds are being used
  • Checks whether Google Analytics is being used...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime