Security Testing Handbook for Banking Applications

A specialised guide to testing a wide range of banking applications.An ideal companion text for security professionals, software developers, managers and QA professionals who work with banking applications.Internal and external testingAttackers are increasingly focusing their attention on the application layer; visionary banks have responded by proactively testing their entire suite of applications. It is not enough any more to test only the public facing Internet banking application. The ease with which many attacks can be carried out now requires that all applications, including internal applications, be tested.Ideal introduction for managers and seniorstaff in the banking industrySecurity Testing Handbook for Banking Applications is a specialised guide to testing a wide range of banking applications. The book is intended as a companion to security professionals, software developers and QA professionals who work with banking applications. The book is a manual for compliance with current and future regulatory compliance requirements; it may also be seen simply as a practical and comprehensive guide to best practice application security to support every person involved in this field.The authors are all part of a large Application Security team at Paladion; between them they have tested over three hundred banking applications. With this book, the authors share their experiences of using a structured approach to security testing, look at the checklist used for testing, discuss different banking applications and see how these can be tested effectively. Ideal reading for information security managers, risk managers and others looking for a practical, non-technical overview of testing security for banking applications.