Security testing is the process of verifying an application's security services and identifying potential security defects. Security tests do not ultimately prove that the application is secure, but rather verify the effectiveness of policies that are selected based on assumptions made during the threat analysis phase.
Security test classification
·safety function test
·  vulnerability security scanning
·  system penetration test
Security testing business requirements
Information security test: provide basis for system integration, acceptance, operation and maintenance
Safety risk assessment: reinforcement project or the safety of the information system security part of the information system construction for targeted acceptance testing, to system security requirements, security reinforcement plan and implement report for testing, test content can include security policy analysis, information system network architecture acceptance inspection, the safety facilities configuration, etc.
Information system security acceptance test: according to the website security requirements, the site security test, the test content involves server host security, application security and data security, as well as the site's important security risks, such as cross-site scripting attacks, SQL injection, information leakage, unsafe configuration management.
Web site security testing: security testing is the process of verifying an application's security services and identifying potential security flaws. Security tests do not ultimately prove that the application is secure, but rather verify the effectiveness of policies that are selected based on assumptions made during the threat analysis phase.
Personal information protection: standardize the personal information protection measures of information service websites, protect the privacy right of individuals in network activities, promote the institutionalization and legal construction of personal information protection in China, and improve the international reputation and competitiveness of information service enterprises.