Rich Mills, a Coveros Senior Consulant, will be presenting a 2-Day Training Course on Security Testing for Testing Professionals at the SQE Training Week in San Diego April 24-25, 2013 Your organization is doing well with functional, usability, and performance testing. However, you know that software security is a key part of your assurance and compliance […]
Detailed instructions for Amazon RDS database setup and configuration: First log on to your Amazon cloud with AWS account. Assuming you have AWS account. https://console.aws.amazon.com/ec2 Step 1: Launch new Instance After Login Select RDS from top left corner. Select Launch a DB Instance. Select the MySQL engine or any other engine that you need for your […]
Introduction In the last blog post, we started down the road of BDD, utilizing the Cucumber-jvm, and using Webdriver to perform some acceptance tests on our web based application. This post will continue where the last one left off, and move us further along, by examining some of the issues with our testing code base, […]
Testing applications and web sites that send email can be difficult. During testing you might generate many email notifications and you don’t want to flood a real mailbox. Or you might not want email from a development system being confused for production email. And especially when using production data during development, you might want to […]
I was working on a SharePoint DoD project, due to security requriements(STIG) it needed to display a disclaimer notice banner when a user initiates a session with the SharePoint Site. This solution tells how to customize and deploy the SharePoint Global.asax that triggers the new session start event to display the disclaimer notice banner. This solution was split into two SharePoint […]
I was working on a mobile view of a SharePoint 2010 site. The static data or the document library on the page displayed in the mobile view. But content editor web part doesn’t appear in mobile view and then I figured out that content editor web part is not supported in mobile view. The work […]
As part of my ongoing collection of reviews and thoughts on today’s Security Testing Tools, I’m taking a look at the Zed Attack Proxy (ZAP) by OWASP. While, my last review of WebSecurify, looked at a very simplistic tool for Web Application Security Testing, this review will bring us a slightly more complex tool. So where […]
I recently published an article about using CAT.NET security scanner on your .NET web application. Once you get it running, it’s fairly simple to integrate it into your continuous integration process. Our strategy here will be to use a down-stream job in Hudson to run static security analysis on our application build after the main compilation/packaging […]
I use a lot of virtual machines for the work I do. Invariably, I start with small virtual hard drives that continuously grow until I run out of space. I used to go through wild gyrations to add an additional hard drive to the machine. It’s actually much simpler to just expand the hard drive. […]
Some of the sites I use require a CAC smart card to establish SSL access. (Forge.mil is an example of this.) Chrome and IE (shudder) are both smart enough to use a smart card for certificates out of the box on Windows. Unfortunately, Firefox doesn’t seem to be set up to do it without some […]
