From the course: Building an Application Security Program

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Verification testing

Verification testing

From the course: Building an Application Security Program

Start my 1-month free trial Buy for my team

Verification testing

“

- [Instructor] Now we're going to talk about a different kind of testing called verification testing. Sometimes there are tests that fall in between SaaS, IS, and dynamic, so we end up having to find a way to test the outliers. Many times these are manual tests that are not covered by automation. Some tests are just hard to automate, so the tools won't cover them, and some testing just doesn't fit neatly into categories. It's not something that's easily tested by SaaS or DaaS, so we need to find a way to test these. Some examples are data flow. Being able to track and make sure that the data entered by a user makes its way to the database properly, or authentication. It's notoriously difficult to automate authentication, tests where if you're logged in as a user, ensuring that there's no way to elevate your privileges to an administrator. So sometimes these tests have to be done manually. Also, business processes. We…

Contents