From the course: CSSLP Cert Prep: 5 Secure Software Testing

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Ensuring a comprehensive approach

Ensuring a comprehensive approach

From the course: CSSLP Cert Prep: 5 Secure Software Testing

Start my 1-month free trial

Ensuring a comprehensive approach

- [Instructor] Security testing isn't a one and done exercise limited to a single scan. You'll want to develop a comprehensive approach to testing to ensure that you're catching as many potential security issues as you can. One family of tests you'll want to build out are called regression tests. These tests are designed to make sure that changes you make over time, things like security fixes and new functionality, don't break any of the existing functionality in the app. Software is constantly changing, and with software as a service apps, you might see dozens of changes in a single week. Your security tests should be constructed in a way that covers all supported versions of your app, but performing every single test for every version of your app isn't the most efficient way to go about this. If you focus your test cases on those components of the app likely to be impacted by the changes, you can run your regression tests…

Contents