Web Application Security Tools Analysis

Abdulrahman Alzahrani, Ali Alqazzaz, Nabil Almashfi, Huirong Fu and Ye Zhu

Studies in Media and Communication, 2017, vol. 5, issue 2, 118-131

Abstract: Strong security in web applications is critical to the success of your online presence. Security importance has grown massively, especially among web applications. Dealing with web application or website security issues requires deep insight and planning, not only because of the many tools that are available but also because of the industry immaturity. Thus, finding the proper tools requires deep understanding and several steps, including analyzing the development environment, business needs, and the web applications¡¯ complexity. In this paper, we demonstrate the architecture of web applications then list and evaluate the widespread security vulnerabilities. Those vulnerabilities are: Fingerprinting, Insufficient Transport Layer Protection, Information Leakage, Cross-Site Scripting, SQL Injection, and HTTP Splitting. In addition, this paper analyzes the tools that are used to scan for these widespread vulnerabilities in web applications. Finally, it evaluates tools due to security vulnerabilities and gives recommendations to the web applications¡¯ users and administrators aiming to educate them.

Keywords: web application; web application security; web application vulnerabilities (search for similar items in EconPapers)
Date: 2017
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
http://redfame.com/journal/index.php/smc/article/view/2663/2984 (application/pdf)
http://redfame.com/journal/index.php/smc/article/view/2663 (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:rfa:smcjnl:v:5:y:2017:i:2:p:118-131

Access Statistics for this article

More articles in Studies in Media and Communication from Redfame publishing Contact information at EDIRC.
Bibliographic data for series maintained by Redfame publishing ().