Which of the following is not part of web application security testing?
a) Real-time testing
b) Input validation testing
c) Security scanning
d) Session management testing