|
|
|
|
|
Architecture of Web-Based Intellectual Vulnerability Scanners for OWASP Web Application Auditing Process |
|
PP: 51-55 |
|
doi:10.18576/aeta/050301
|
|
Author(s) |
|
Nurmyshev Serik,
Kanat Kozhakhmet,
Lyazzat Atymtayeva,
|
|
Abstract |
|
Nowadays, many business applications such as online banking, e-insurance, e-commerce, mail, etc., are often made as web
applications. The rapid popularization and the usage of web technology everywhere, transition of traditional business into the sphere of
web applications has made them more attractive to attack for hackers, with the aim to steal confidential user information and use this
information for personal gain. Vulnerability scanners are often used in web application security assessments, but there are few properly
developed web-based vulnerability scanners, that used intellectual expert based tools. Development of intellectual web-based security
scanners for OWASP security standard has high demand in security auditing area. Expert systems in vulnerability scanners can increase
effectiveness and decrease a cost of OWASP auditing process. |
|
|
|
|
|