It doesn't come under functional testing.. Security testing is to make sure that your application is not vulnerable to attacks..