Security Testing and Test Automation in Fleet Management System Ensures System Integrity

B grade B · published by Crestech

Crestech published this case study on 3 Sep 2021 about an anonymised client described as "A fleet management provider". It names fleet and telematics and reports 3 quantified outcomes.

1 TitleSecurity Testing and Test Automation in Fleet Management System Ensures System Integrity ev-0322
2 Clientanonymised by vendor: "A fleet management provider" ev-0324
3 Systemsfleet and telematicsev-0325
4 Testing typestest automationev-0326 integration, EDI and APIev-0327 security (gray-box penetration testing)re-testing
5 ScopeSecurity assessment of a fleet management provider's web application and APIs in two phases: attack-surface mapping, tool-based and manual vulnerability testing, simulated attack scenarios, open-port checks, gray-box penetration attacks on APIs, and re-testing of reported vulnerabilities after fixes. Engagement length is not stated.
6 Team and stackNot stated
7 Outcomes
  • 4 medium and 1 low-risk vulnerabilities identified in phase 1: Phase 1: Identified 4 medium and 1 low-risk vulnerabilities in the web application.ev-0328
  • 3 medium and 1 low-risk vulnerabilities resolved in phase 2: Successfully resolved 3 medium and 1 low-risk vulnerabilitiesev-0329
  • 80% reduction in identified vulnerabilities: 80% reduction in identified vulnerabilities.ev-0330
8 Date published2021-09-03 (page metadata)ev-0333
9 Source URLhttps://www.crestechsoftware.com/case-studies/security-testing-on-owasp-standards-for-a-fleet-management-system/
10 Scope notes
  • Re-tested reported vulnerabilities after fixes, ensuring thorough remediation and closure. as publishedev-0331
  • ensuring driver data and system integrity against potential threats as publishedev-0332

What the case study does not state

  • The client's name
  • How long the engagement lasted
  • Team size and tools

Outcomes are quoted as published by the vendor and are not verified by this site.

Related case studies

Scores are computed from vendors' published case studies and third-party reviews by the methodology on this site, frozen on the date shown. Case study outcomes are quoted as published by the vendor and are not verified results. Absence of evidence is not evidence of absence. This site does not accept payment from vendors.

Suggest a case study or correction