Security Testing: Robustness, Reliability and Security of the Application
If your software does not stand up to the challenge of a wide array of usage conditions and user environments, its effectiveness will be inherently limited. At Mantra, we have developed a rigorous array of robustness, reliability, and security testing procedures that will give you detailed insight into your program’s hardiness under many different conditions.
Our series of robustness, reliability, and security tests will help ensure that the software provides fault-free service under specific hardware and software environments over long periods of time. Our tests will provide an unflinching assessment of the behavior of the software under duress. This solutions covers
- Denial of Service - HTTP Flooding
- SQL Injection - Timing Delay
- FTP Bounce Attack
- Cross-Site Scripting (XSS) - Reflected Path Traversal
- Flooding – “Contact Us” and “Email a Friend”
- Information Disclosure – Directory Listing
- Information Disclosure – SQL Errors
- Confidentiality Testing
- Integrity Testing
- Authentication Testing
- Authorization Testing
- Availability Testing, and
- Non-repudiation Testing
- Penetration Testing
- Discovery,
- Vulnerability scan, Vulnerability assessment,
- Security Assessment
- Penetration test,
- Security audit and Security reviews.
Case Study |
Challenges |
Mantra Testing Solution |
|---|---|---|
Database Application – Data Warehouse / BI and SSRS
|
Automotive e-marketing company wanted to leverage existing national dealer statistics for a meaningful analysis and revenue generating channel. |
With 100s of car dealers accessing the same database load and security was a concern. With 2 QA and a QA lead, Mantra was able to design and implement a load testing (with Automation) strategy and found many vulnerabilities in the database performance at 1.2 times of the maximum expected load. |
Financial ISV
|
With in-house team developing a very complex web based application, customer wanted an offshore testing team to quickly learn the app and perform performance, system and security testing.
|
Mantra came up with a very effective sourcing model by combining all onsite/offsite and offshore resource teams. Mantra then formed special processes for communication and Knowledge Transfer (KT) phase. Finally, Mantra came up with master project plan with very tight deadlines. Mantra’s 1 project manager, 2 team leads and 15 test engineers executed that plan relentlessly to ensure successful delivery. |
Protect Your Firm’s Most Valuable Assets with a Product Security Code Review
One of main hindrances that have impeded the growth of the Internet economy is security issues. Many existing applications have proven to be vulnerable to attacks by hackers who conspire to rob critical organizational information, intellectual property, proprietary secrets, or even worse -- sensitive customer data.
The Mantra team can help to ensure the maximum security of your Internet applications. By conducting a thorough review of your online application’s security code, we can pinpoint the vulnerabilities and loopholes that may be putting your firm at risk.
- Assess software’s performance under stressful circumstances, such as failure modes, varying resource constraints, and peak-load conditions
- Evaluate software’s ability to deal with such threats as identity spoofing, data tampering, illegal access, and denial of service attacks
- Spot typical security holes such as buffer overruns
- We have also completed a high degree of automation to bring in exceptional productivity gains. We have had some situations where our turnaround time has been just a few days.
- Ensures that standard mitigation techniques work as expected
Additional Benefits of engaging Mantra Testing Solutions
- Independent Verification
- Improved Coverage
- Reduced User time.
- Reduced cost per Defect
- Reduction in Support calls
- Detail Application analysis - Red and green zone within applications in terms of application quality and stability.
Configuration management Testing
Testing of distribution, setup, migration, un-install, update, and ongoing state / configuration management of the software.
