This chapter summarizes some of key security automation tips and techniques.
In the automation testing framework, we compared the common UI automation frameworks, such as Macaca, AutoIT, Selenium, Appium, and Sikuli. We demonstrated most of the cases in Selenium in this book. For BDD frameworks, there is Robot Framework, Behave, Jgiven, and Gauntlt. Robot Framework and Gauntlt are mostly illustrated with case studies in the previous chapters.
For secure code review, we listed the code patterns that related to common security issues, such as insecure protocol, weak encryption, and hard-coded information. Some source code search tools are also introduced, such as GREP rough Audit and GrepBugs.
For API security testing, the testing tools, ZAP, JMeter, FuzzDB, and ZAP OpenAPI are demonstrated. We also discussed some sources of FuzzDB and how to generate your custom security...