This chapter introduces the integration of security and automation. The domain of automation testing covers white-box code inspection, unit testing, API testing, integration testing, and end-to-end UI integration testing. The automation technique being used may depend on the effort required and the automation rate. The security testing domain was also explored in this chapter. We will primarily be focused on common security issues for web applications and mobile applications, such as password attacks, data validation, information disclosure, session management, and secure transmission.
We also illustrated some security testing scenarios where automation frameworks can help. For example, the Selenium Web UI framework is used to walk through the UI flow for security tools to inspect security issues. JMeter can be used with security payloads to do RESTful API security testing...
