What to Focus on During E-Commerce Security Testing?

April 29 10:00 2015 by Nataliia Vasylyna Print This Article

More and more people are involved in online activities. A lot of services became available online such as banking operations, booking tickets, online purchases, etc.

Specialists in mobile application testing, desktop testing and web site testing know that, unfortunately, hackers also use the Internet for malicious intentions. Often e-commerce and banking applications become targets of cyber-attacks as they involve monetary operations and the users’ sensitive data.

So, a high security level must be provided for e-commerce and banking applications. Security testing is paid considerable attention during e-commerce testing and banking software testing. This activity involves experts in penetration testing, they work manually and use various tools.

Here Are Some Important Aspects That Must Be Considered During E-Commerce Security Testing:

Data transmitting. All kinds of data exchange between the users’ machines and application server should be performed via HTTPS protocols; session tokens, credentials must be transferred over a secured channel.
Software crash. When a page or the application crashes, no software or server data should be displayed; the data can be used by hackers for malicious purposes.
Error messages. Various error messages must not reveal any application information.
Cookies. All the data stored in the cookies should be encrypted, no passwords must be in the cookies.