2017 · 27 citations · 12 references
ComputingComputer ScienceCybersecurityComputer SecurityVulnerability AnalysisWeb SecurityApplication Security ArchitectureCross-site ScriptingSql InjectionVulnerability ManagementWeb Application SecurityWeb Application VulnerabilitiesInformation LeakageSecure Web DevelopmentTransport Layer ProtectionWeb Application Security ScanningWeb Application Vulnerability AnalysisWeb Application Vulnerability AssessmentWeb Application Vulnerability ScanningWeb Vulnerability Assessment
Strong security in web applications is critical to the success of your online presence. Security importance has grown massively, especially among web applications. Dealing with web application or website security issues requires deep insight and planning, not only because of the many tools that are available but also because of the industry immaturity. Thus, finding the proper tools requires deep understanding and several steps, including analyzing the development environment, business needs, and the web applications' complexity. In this paper, we demonstrate the architecture of web applications then list and evaluate the widespread security vulnerabilities. Those vulnerabilities are: Insufficient Transport Layer Protection, Information Leakage, Cross-Site Scripting, and SQL Injection. In addition, this paper analyzes the tools that are used to scan for these widespread vulnerabilities in web applications. Finally, it evaluates tools due to security vulnerabilities and gives recommendations to the web applications' users and administrators aiming to educate them.
12
Thomas Ristenpart, Eran Tromer, Hovav Shacham et al. · 2009 · 2K citations
State of the Art: Automated Black-Box Web Application Vulnerability Testing
Jason Bau, Elie Bursztein, Divij Gupta et al. · 2010 · 317 citations