Unit Test Development using Generative AI

Generative AI can be a helpful tool, but there are some best practices and ethical considerations we need to keep in mind when using it, such as:

• no model is perfect
• don’t assume that the information you give the AI via prompt will be kept secure
• a new tool doesn’t mean existing best practices are rendered obsolete

When creating input validation tests, we want to systematically verify that an application’s inputs correctly handle a wide range of data.

File exposure testing involves checking whether a web application or script improperly exposes files and directories to users.

Encryption testing involves verifying the security and correctness of the encryption and decryption processes in a system.

Access control testing involves verifying that the security measures that regulate who or what can view or use resources in a computing environment are functioning as intended.

Cross-site scripting is a security vulnerability that allows attackers to inject malicious scripts into webpages viewed by other users.

Cross-site scripting prevention testing involves checking that your web application properly escapes user input.

The techniques that are used to create reliable software are also used to create secure software.

Input validation is a process where you check if the data provided by a user or another system meets specific criteria before processing it.