Vulnerability Assessment with Network-Based Scanner Method for Improving Website Security

Laksmiati, Dewi

doi:10.47709/cnahpc.v5i1.1991

Cited by 8 publications

(2 citation statements)

References 2 publications

(2 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our vulnerability assessment definition is similar to that of Laksmiati and Dewi (2023) [23], who defined it as a method or procedure to discover security risks and vulnerabilities of a system and its data that could be exploited and hacked by attackers. This can allow companies and website owners to figure out their own vulnerabilities so that they can take security precautions and defend their websites as well.…”

Section: Vulnerability Assessmentmentioning

confidence: 99%

The Reality of Internet Infrastructure and Services Defacement: A Second Look at Characterizing Web-Based Vulnerabilities

et al. 2023

View full text Add to dashboard Cite

In recent years, the number of people using the Internet has increased worldwide, and the use of web applications in many areas of daily life, such as education, healthcare, finance, and entertainment, has also increased. On the other hand, there has been an increase in the number of web application security issues that directly compromise the confidentiality, availability, and integrity of data. One of the most widespread web problems is defacement. In this research, we focus on the vulnerabilities detected on the websites previously exploited and distorted by attackers, and we show the vulnerabilities discovered by the most popular scanning tools, such as OWASP ZAP, Burp Suite, and Nikto, depending on the risk from the highest to the lowest. First, we scan 1000 URLs of defaced websites by using three web application assessment tools (OWASP ZAP, Burp Suite, and Nikto) to detect vulnerabilities which should be taken care of and avoided when building and structuring websites. Then, we compare these tools based on their performance, scanning time, the names and number of vulnerabilities, and the severity of their impact (high, medium, low). Our results show that Burp Suite Professional has the highest number of vulnerabilities, while Nikto has the highest scanning speed. Additionally, the OWASP ZAP tool is shown to have medium- and low-level alerts, but no high-level alerts. Moreover, we detail the best and worst uses of these tools. Furthermore, we discuss the concept of Domain Name System (DNS), how it can be attacked in the most common ways, such as poisoning, DDOS, and DOS, and link it to our topic on the basis of the importance of its infrastructure and how it can be the cause of hacking and distorting sites. Moreover, we introduce the tools used for DNS monitoring. Finally, we give recommendations about the importance of security in the community and for programmers and application developers. Some of them do not have enough knowledge about security, which allow vulnerabilities to occur.

show abstract

Section: Vulnerability Assessmentmentioning

confidence: 99%

The Reality of Internet Infrastructure and Services Defacement: A Second Look at Characterizing Web-Based Vulnerabilities

et al. 2023

View full text Add to dashboard Cite

show abstract

“…Accessibility from a range of devices with installed web browsers, such as desktops, smartphones, or tablets, is one of the key benefits of web applications. This enables users to access the application whenever and from anyplace they have an internet connection [1].…”

Section: Introductionmentioning

confidence: 99%

Common Vulnerabilities and Exposures Assessment of Private Higher Educational Institutions Using Web Application Security

Ellen F. Mangaoang

2024

jes

View full text Add to dashboard Cite

The advancements in technology has led to advancements in threats and vulnerabilities as well. Academic websites are not spared from this. This study aims to evaluate the common vulnerabilities and exposures of private higher educational institution’s website using Open Web Application Security Project. Seven private higher education institutions were evaluated using Open Web Application Security Project Zed Attack Proxy and Open Web Application Security Project top 10. The top vulnerabilities the higher educational institutions were exposed to were broken access control, insecure design and software and data integrity failures. There were two higher educational institutions with high level of risks. Also, a total of thirty-two risks or vulnerabilities were identified in the study. The identification of vulnerabilities or exposures in websites will help the private schools to become aware of possible cyberattacks to their institution’s website. This will help the institution to identify and prevent further loss or damage.

show abstract

Enhancing Safety and Security in Renewable Energy Systems within Smart Cities

Rele,

Patil

2023

2023 12th International Conference on Renewable Energy Research and Applications (ICRERA)

View full text Add to dashboard Cite

Vulnerability Assessment with Network-Based Scanner Method for Improving Website Security

Cited by 8 publications

References 2 publications

The Reality of Internet Infrastructure and Services Defacement: A Second Look at Characterizing Web-Based Vulnerabilities

The Reality of Internet Infrastructure and Services Defacement: A Second Look at Characterizing Web-Based Vulnerabilities

Common Vulnerabilities and Exposures Assessment of Private Higher Educational Institutions Using Web Application Security

Enhancing Safety and Security in Renewable Energy Systems within Smart Cities

Contact Info

Product

Resources

About