A Survey on Detection and Prevention of Web Vulnerabilities

Abstract

The Internet provides a vast range of benefits to society and empowers the users in a variety of ways to use web applications. Simply, the internet has become the most transformative and fast-growing technology ever built, but it also brings new security challenges to web services in internet applications because of the scattered and open nature of the internet. A simple vulnerability in the program code could favor/benefit an attacker to obtain unauthorized access and perform adversary actions. Hence, the security of web applications from a hacking attempt is of paramount importance. This paper focuses on a literature survey recapitulating security solutions and major vulnerabilities to promote further research by systemizing the existing methods, on a bigger horizon. The data is collected from an absolute of 86 primary studies that are taken from well-known digital libraries. Different methods comprising secure programming, static, Dynamic, Hybrid analysis, and machine learning classify the data from articles. The quantity of references or the significance of a developing strategy is kept in account while selecting articles. Overall, our survey suggests that there is no way to alleviate all the web vulnerabilities therefore more studies is desirable in the area of web information security. All methods' complexity is addressed and some recommendations regarding when to use the application of given methods are provided. Finally, we typify the experience gained and examine future research openings in web application security.

Detecting vulnerabilities in website using multiscale approaches: based on case study

“…These include normal, error-based double query, and blind injection techniques, empowering attackers to manipulate database queries and potentially compromise sensitive data. It underscores the importance of robust security measures such as code audits, input validation, and the adoption of secure coding practices to mitigate these threats effectively [3], [4]. High detection accuracy machine language algorithms (MLA) can guarantee detection being achieved in real-time [5].…”

Secure Software Development Lifecycle: A Case for Adoption in Software Smes

“…Manual code analysis in the security context involves performing code vulnerability checks during peer code reviews [10]. Automated code analysis at the development stage is performed using static analysis tools that scan the code for vulnerabilities without executing the code [11], [13], [26].…”

A Comparative Study of Web Application Security Parameters: Current Trends and Future Directions

“…Amir Manzor et al [26] presented a literature survey recapitulating security solutions and major vulnerabilities to promote further research by establishing a system of the existing methods on a bigger horizon. They suggested that there is no way to alleviate all the web vulnerabilities; therefore, further study is desirable in web information security.…”