Security testing of web applications

Abstract

This article provides brief methodology for security testing of web applications. Web applications are very popular in recent years and in many areas are beginning to replace desktop applications. However developers of web applications are facing the fact that there is not a standardized way for creating secure code and complete security testing of their applications. This article brings together the methodology and best practices for web applications security testing from different resources (recommendation of professionals, standards (ISO/IEC 27000-series 1), open security project OWASP 2).