A very good description.
Website Security Test