Security testing Concepts and main things to test in Security Testing?

Whenever we develop any applications security testing should be on top priority basically for Finance domain and banking applications. Commonly in security testing below terms uses most of the times.

 - Password cracking
 - Vulnerability
 - URL manipulation
 - SQL injection
 - Cross Site Scripting
 - Spoofing

Below are few things needed to concentrate while doing security testing:

 - Authentication validations and Password protection
 - Direct URL’s should not work after logging to the application
 - HTTP and HTTP’s validations
 - Protocols and IP config validations
 - Memory leeks
 - Configuration of the application in servers