Журнал «Современная Наука»

Russian (CIS)English (United Kingdom)
MOSCOW +7(495)-142-86-81

DEVELOPMENT OF A WEB APPLICATION SECURITY ANALYZER BASED ON NETWORK ATTACK MODELING

Rusakov Alexey Mikhailovich  (Senior Lecturer, MIREA - Russian Technological University)

Filatov Vyacheslav Valeryevich  (Associate Professor, MIREA - Russian Technological University)

Dolzhenkov Sergey Sergeevich  (Assistant, MIREA - Russian Technological University)

Golubev Daniil Dmitrievich  (MIREA - Russian Technological University)

Saraev Daniil Andreevich  (MIREA - Russian Technological University)

Shakhidzhanyan Andrey Albertovich  (MIREA - Russian Technological University)

The article discusses the basics of web application security, including the different types of attacks that can be performed on web applications. It defines a model of current threats to web applications, highlighting the causes of vulnerabilities. Described the types of attacks such as: injection attacks and authentication and access control vulnerabilities. Reviewed and described the methods of vulnerabilities detection, implemented in the developed solution using special tools. Considered the unique approach to detection and identification of vulnerabilities of the developed security analyzer. Also, the technical aspects of the application are covered, with details of the backend and frontend. The key modules and functions that make the web-application security analyzer operational are described.

Keywords:Web application security analysis, vulnerability detection, web-application security threat model, web application security analyzer development

 

Read the full article …



Citation link:
Rusakov A. M., Filatov V. V., Dolzhenkov S. S., Golubev D. D., Saraev D. A., Shakhidzhanyan A. A. DEVELOPMENT OF A WEB APPLICATION SECURITY ANALYZER BASED ON NETWORK ATTACK MODELING // Современная наука: актуальные проблемы теории и практики. Серия: Естественные и Технические Науки. -2023. -№07/2. -С. 105-112 DOI 10.37882/2223-2966.2023.7-2.24
LEGAL INFORMATION:
Reproduction of materials is permitted only for non-commercial purposes with reference to the original publication. Protected by the laws of the Russian Federation. Any violations of the law are prosecuted.
© ООО "Научные технологии"