Creating Practical Security Test-Cases for Web Applications

The document discusses negative testing techniques for web applications. It explains that negative testing involves finding unintended functions and manipulating code in unexpected ways to uncover security vulnerabilities. The testing process involves mapping application logic and data flows, using both manual and automated testing methods to input unexpected data and manipulate application control flows. Testers must understand the application thoroughly to identify potential weaknesses in how the application handles unexpected inputs or flows.