Analysis of Web Application Vulnerabilities using Dynamic Application Security Testing
Ravinder Singh, Mukesh Kumar Gupta, Dipak R. Patil, Sarang Maruti Patil
Abstract
In the era of ubiquitous digital connectivity, securing software applications against cyber threats is paramount. Dynamic Application Security Testing (DAST) has emerged as a crucial methodology in the realm of cybersecurity, providing a dynamic, real-time approach to identify and mitigate vulnerabilities within software applications. This research paper delves into the significance and application of DAST in fortifying cybersecurity measures. DAST represents a departure from traditional static testing methods, which analyze source code or binaries, by assessing applications during runtime. The methodology involves the active, controlled probing of live applications through simulated cyber-attacks, including injection of malicious payloads and emulation of common exploit techniques. By dynamically assessing how applications respond to these simulated threats, DAST offers a real-world evaluation of security posture, facilitating the identification of potential vulnerabilities.This research paper analyzed the Dynamic Application Security Testing (DAST) reports for different web applications over the past two years and provide a valuable resource for cybersecurity practitioners, researchers, and organizations striving to adopt effective strategies in safeguarding their digital assets against evolving cyber threats in the current environment.