Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Practical Security Automation and Testing

You're reading from   Practical Security Automation and Testing Tools and techniques for automated security scanning and testing in DevSecOps

Arrow left icon
Product type Paperback
Published in Feb 2019
Publisher Packt
ISBN-13 9781789802023
Length 256 pages
Edition 1st Edition
Languages
Tools
Arrow right icon
Author (1):
Arrow left icon
Tony Hsiang-Chih Hsu Tony Hsiang-Chih Hsu
Author Profile Icon Tony Hsiang-Chih Hsu
Tony Hsiang-Chih Hsu
Arrow right icon
View More author details
Toc

Table of Contents (19) Chapters Close

Preface 1. The Scope and Challenges of Security Automation FREE CHAPTER 2. Integrating Security and Automation 3. Secure Code Inspection 4. Sensitive Information and Privacy Testing 5. Security API and Fuzz Testing 6. Web Application Security Testing 7. Android Security Testing 8. Infrastructure Security 9. BDD Acceptance Security Testing 10. Project Background and Automation Approach 11. Automated Testing for Web Applications 12. Automated Fuzz API Security Testing 13. Automated Infrastructure Security 14. Managing and Presenting Test Results 15. Summary of Automation Security Testing Tips 16. List of Scripts and Tools 17. Solutions 18. Other Books You May Enjoy

Questions

  1. Which one best describes the purpose of RetireJS?
    1. Detect known vulnerable JavaScript libraries
    2. Scan for XSS
    3. Scan for SQL injection issues
    4. Scan for JavaScript security coding issues
  2. To interpret the SSLScan results, what kind of connection should we focus on
    1. Accepted
    2. Rejected
    3. Failed
    4. Disconnected
  3. Which of the following is an indicator of a weak HTTPS configuration?
    1. The use of SSL v2 or v3
    2. The use of MD5 hashing
    3. The RSA key is smaller than 1024 bits
    4. All of the above
  4. What can an NMAP NSE script do for web security testing?
    1. Security header check
    2. HTTP slow DoS check
    3. SQL injection
    4. All of the above
  5. What keywords are used to integrate NMAP with Robot Framework?
    1. Run process
    2. Should contain
    3. {result.stdout}
    4. All of the above

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime