Fork me on GitHub

Test and Verification -> Dynamic depth for infrastructure: Load tests

Risk and Opportunity

Risk: As it is unknown how many requests the systems and applications can serve, due to an unexpected load the availability is disturbed.
Opportunity: Load test against the production system or a production near system is performed.

Exploit details

Usefullness: Medium
Required knowledge: Medium (two disciplines)
Required time: Low
Required resources (systems): Very High

OWASP SAMM 2 Mapping: v-security-testing|A|1