PJCT: Penetration testing based JAVA code testing tool

Abstract

Security is the key concern for every system, network or application. Penetration Testing in Software engineering and System Security in Computer Networks are key areas in secure development of an application. Many approaches and research techniques have tried to address the issue of secure coding in development phase only. Rigorous approaches have been introduced in the treatment of security aspects in information systems. Penetration testing is one of the approaches for system security. Penetration testing helps to contradict the security aspects of the system. It is technique of deceiving the hypothesis that any system, network or application is secure. Our study reveals that there are hardly any good quality tool(s) that can detect the vulnerable code in Application, so in this paper we propose a Penetration Testing based Java Code Testing Tool (PJCT) to check major security attribute of any given java code. The PJCT can detect the presence or absence of seven attributes, which we introduce for the first time to test the security of the application effectively. In this paper performance analysis of PJCT has been exhibited and also it's comparison with other tools such as PIC et al. have also been demonstrated.

Bridging the Gap: A Survey and Classification of Research-Informed Ethical Hacking Tools

“…Firmaster [76], Gail-PT [79], HILTI [82], IoTFuzzer [83], JCOMIX [84], LAID [85], Link [86], Lore [87], Mace [89], MaliceScript [92], Masat [93], Mirage [94], Mitch [95], MoScan [96], NAUTILUS [97], NAVEX [98], No Name (CSRF) [101], No Name (TTCN-3) [102], NodeXP [104], OSV [107], ObjectMap [105], Owfuzz [108], PJCT [115], PURITY [117], PentestGPT [113], PhpSAFE [114], Project Achilles [116], Pyciuti [118], RAT [119], ROSploit [123], RT-RCT [124], Revealer [120], RiscyROP [121], Robin [122], SOA-Scanner [130], SVED [133], Scanner++ [125], SerialDetector [127], ShoVAT [128], Snout [129], Spicy [131], SuperEye [132], TChecker [135], TORPEDO [136], UE Security Reloaded [137], VAPE-BRIDGE…”

“…PJCT (2015, Jain et al [115]) is a tool designed to secure attributes in Java code. This addresses a crucial aspect of secure software development while emphasizing early detection of vulnerabilities during the development process.…”