CSSLP Cert Prep: 5 Secure Software Testing

Prepare for the fifth domain of the CSSLP exam: Secure Software Testing. Learn about testing, tracking, and remediating bugs.

Introduction

• Secure software testing

1. Developing Security Test Cases

• Understanding your test environment
• Automation vs. manual testing
• Ensuring a comprehensive approach
• Validating cryptography

2. Developing a Testing Strategy

• Grouping your tests
• Leveraging external resources
• Verifying and validating documentation

3. Conducting Security Tests

• Securing test data
• Verification and validation testing
• Identifying undocumented functionality

4. Reviewing the Results

• Security implications of test results
• Classifying and tracking security errors

Conclusion

• Next steps