[White Paper] Automated Testing of Privilege Escalation in Web Applications

White Paper Description:
Privilege Escalation vulnerabilities in web applications have existed since the early days of web applications, yet since testing for them is such a complicated and tedious manual task, they are often overlooked in web application assessments.
Furthermore, since Privilege Escalation is considered a "Logical Vulnerability" that can only be assessed by humans, most assume that it is not possible to implement a successful automated process which will locate all such issues.
While there is truth in this assumption, things are not as bleak as they appear. Automated processes can help with making the testing process faster and more streamlined, and although it cannot cover all Privilege Escalation scenarios, it can certainly assist greatly with tasks such as Differential Analysis of URLs, given the proper technology and heuristics.
Watchfire AppScan 7.0 introduces an automated Differential Analysis, which saves auditors a substantial amount of time, allowing them to invest their precious resources in other aspects of web application vulnerability assessments.

* photos source from " everystockphoto "

Posted on:11 Dec 2008
Published on: 11 Dec 2008
Source: Logicalis
Format: Adobe Acrobat (.pdf)
Length: 8 page(s)
Language: English
Type: White Paper
Copyright: Logicalis
Right click here to download

Technorati : APM, Application Performance Management, Logicalis, Software Testing, Testing
Del.icio.us : APM, Application Performance Management, Logicalis, Software Testing, Testing