Web application prototype: State-of-art survey evaluation

Ahmed, Mehreen; Adil, Mahum; Latif, Seemab

doi:10.1109/nsec.2015.7396339

Cited by 2 publications

(1 citation statement)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Mehreen et al [37] present a state-of-the-art survey for evaluations. They performed web application assessments based on a questionnaire with very positive results.…”

Section: Literature Reviewmentioning

confidence: 99%

A Comparative Study of Web Application Security Parameters: Current Trends and Future Directions

Shahid

Hameed²,

Javed

et al. 2022

Applied Sciences

View full text Add to dashboard Cite

The growing use of the internet has resulted in an exponential rise in the use of web applications. Businesses, industries, financial and educational institutions, and the general populace depend on web applications. This mammoth rise in their usage has also resulted in many security issues that make these web applications vulnerable, thereby affecting the confidentiality, integrity, and availability of associated information systems. It has, therefore, become necessary to find vulnerabilities in these information system resources to guarantee information security. A publicly available web application vulnerability scanner is a computer program that assesses web application security by employing automated penetration testing techniques that reduce the time, cost, and resources required for web application penetration testing and eliminates test engineers’ dependency on human knowledge. However, these security scanners possess various weaknesses of not scanning complete web applications and generating wrong test results. Moreover, intensive research has been carried out to quantitatively enumerate web application security scanners’ results to inspect their effectiveness and limitations. However, the findings show no well-defined method or criteria available for assessing their results. In this research, we have evaluated the performance of web application vulnerability scanners by testing intentionally defined vulnerable applications and the level of their respective precision and accuracy. This was achieved by classifying the analyzed tools using the most common parameters. The evaluation is based on an extracted list of vulnerabilities from OWASP (Open Web Application Security Project).

show abstract

“…Mehreen et al [37] present a state-of-the-art survey for evaluations. They performed web application assessments based on a questionnaire with very positive results.…”

Section: Literature Reviewmentioning

confidence: 99%