Date of Publication :20th December 2017
Abstract: Web apps are designing and evaluating vulnerability removal measures with very short turnaround time. The security of the website requires the assurance of privacy and data protection. This paper proposes a research approach in the web application system. The World Wide Web offers a wide range of advanced software. The security test methodology is based on an understanding of the interaction between the user and the server via HTTP. In this section, the author will discuss the mechanisms for the creation of web applications throughout order to recognize weak web application coding practices. In this section, the author discusses frames for web application security evaluation in order to identify bad coding practices for attacks such as SQL injecting and cross-site scripting that vulnerable web applications may have. SQL injection and XSS attacks are extremely dangerous, since the database is a key information source for the attacker. The suggested approach consists of creating a searchable research suite based on the heuristic genetic user session. The main goal of this article is to clarify the protection of a cloud-based framework for online testing.
Reference :
-
- “Web application firewalls for security and regulatory compliance,” 2017.
- Z. Ghanbari, Y. Rahmani, H. Ghaffarian, and M. H. Ahmadzadegan, “Comparative approach to web application firewalls,” in Conference Proceedings of 2015 2nd International Conference on KnowledgeBased Engineering and Innovation, KBEI 2015, 2016, pp. 808–812, doi: 10.1109/KBEI.2015.7436148.
- 2012 Trends Report: Application Security Risks. Cenzic, Inc., 2012.
- “OWASP Top 10 - 2017: The Ten Most Critical Web Application Security Risks,” Open Web Appl. Secur. Proj., 2017.
- “6 Ways To Strengthen Web App Security.” .WHID Project is now a Joint WASC/OWASP Project. WASC, 2014.
- B. Musa Shuaibu, N. Md Norwawi, M. H. Selamat, and A. Al-Alwani, “Systematic review of web application security development model,” Artif. Intell. Rev., vol. 43, no. 2, pp. 259–276, 2013, doi: 10.1007/s10462-012-9375-6.
- Web Application Vulnerability Scanners.”
- “Source Code Security Analyzers.”