Testing and Exploiting Tools to Improve OWASP Top Ten Security Vulnerabilities Detection

Malak Aljabri, Maryam Aldossary, Noor Al-Homeed, Bushra Alhetelah, Malek Althubiany, Ohoud Alotaibi, Sara Alsaqer

20222022 14th International Conference on Computational Intelligence and Communication Networks (CICN)21 citationsDOI

Abstract

In many different sorts of businesses, including public and private, government, critical infrastructures, etc., web apps have grown recently. Therefore, securing web applications is a major concern to protect businesses from loss and unauthorized access to sensitive information. Developers use vulnerable thirdparty modules or components or create programming security flaws themselves and occasionally work with tight budgets. These situations frequently cause people to overlook a crucial aspect of development life cycle security. This paper studies and tests the currently available web security and exploitation tools of OWASP's top ten security vulnerabilities. The main aim of this paper is to improve the detection of OWASP's top ten security vulnerabilities by proposing an exploitation and detection tool that combined features of the tools that has been tested in the paper.

Topics & Concepts

Computer securitySecure codingComputer scienceWeb application securitySecurity testingSecurity through obscuritySecurity bugThreat modelSecurity information and event managementWeb applicationInformation securityRisk analysis (engineering)Software security assuranceSecurity serviceInternet privacyCloud computing securityBusinessWeb serviceWorld Wide WebWeb developmentCloud computingOperating systemAdvanced Malware Detection TechniquesSecurity and Verification in ComputingWeb Application Security Vulnerabilities