# Check the URL셲 encryption. Except main page all other branches and sensitive pages should be encrypted in URL
# Check the Cookies, all sensitive cookies should be removed automatically when the application get closed
# Sensitive information stored in the cookies must be encrypted
# For authentication kind of site, the cache must be cleared on exit
# If we edit the cookies while the application is on run, then it should not affect the system; instead it should restore its original (proper) state when the next action happens in the application
# All password and user셲 sensitive information transaction should be encrypted
# Encryption should be in the simple way to identify. Typically it should be the mix of special characters, numerals and alphabets(both cases A/a)
# Folder level access should not be allowed. Eg: if the url opens a page inside a specific folder, then if any one deleted the file name and tried with that folder name should not be able to open that folder
# Internal and external IP address mapped with the URL should be secured.

Related Documents
  1. Putting Security Into Your Virtual World (772)
  2. [Ebook] Linux 101 Hacks (3220)
  3. OWASP Top 10 - 2010 (Security Testing) (2067)
  4. Password Recovery for Security Testing (1672)
  5. New Advanced SQL Injection For Advanced Security Testing (2020)
  6. Security Testing Reference : SQL Injection (2511)
  7. [Ebook] Google Hacks : 2nd Edition (2875)
  8. [Ebook] Hacker Attack (3088)
  9. [Free] Security Software Testing Suite (SSTS) : Application-based security testing (2031)
  10. Using JTest for Security Testing (2534)
  11. Security Testing Reference : Cross-Site Scripting (XSS) (2414)
  12. How to Secure CXF Web Services with SSL/TLS and WS-Security (5155)
  13. [Free] WebGoat : Security Testing Tool (2553)
  14. OWASP Testing Guide (2970)
  15. 2010-10-27, SecureWorld Expo @ USA (1700)
  16. [Paid] Sunbelt Network Security Inspector : Network Vulnerability Assessment Scanning (1845)
  17. SQL - injection: How to Test web applications against SQL attacks (2491)
  18. [Video] Software Security Testing: Strengthening Your Defense Strategy (1039)
  19. Software Security: Building Security In (1101)
  20. Types of Web Security Testing? (1676)