Web Application Critical Resources Protection

Korniyenko, Bogdan; Ladieva, Lesya; Galata, Liliya; Yakovenko, Olesya; Nesteruk, Andrii; Ivannikova, Viktoriia

doi:10.1109/atit54053.2021.9678541

Cited by 1 publication

(3 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These systems comprise stored data, including student and lecturer profile pages, functionalities for the management of files through downloading and uploading various documents, and virtual learning-relevant forum pages. The present research employs a qualitative and descriptive methodology ( Invicti, 2021 ) based on penetration testing techniques ( Al-Shaer, Spring & Christou, 2020 ; Korniyenko et al, 2021 ; The MITRE Corporation, 2021 ; OWASP, 2021b ; Yosifova, 2021 ) to identify essential vulnerabilities in eLMS in Western Balkan HEIs. The primary objective is to discern critical vulnerabilities within eLMSs in HEIs situated in the Western Balkan region.…”

Section: Resultsmentioning

confidence: 99%

“…The process of penetration testing ( Zakaria et al, 2019 ) involves passive analysis of eLMS for weaknesses, technical flaws, or vulnerabilities. According to MITRE ATT&CK and OWASP ( Al-Shaer, Spring & Christou, 2020 ; Korniyenko et al, 2021 ; Pham & Dang, 2018 ; Zare, Zare & Azadi, 2018 ), the primary purpose of penetration tests is to find more effective attack vectors as well as exploit vulnerabilities.…”

Section: Resultsmentioning

confidence: 99%

“…In addition, penetration test as a security mechanism are limited to only finding vulnerabilities, not fixing them or proposing specific preventive strategies ( Doyle et al, 2020 ; Korniyenko et al, 2021 ). An overview of penetration test phases from various standards such as NIST, ISAAF, and PTES is shown in Fig.…”

Section: Methodsmentioning

confidence: 99%

See 2 more Smart Citations

A lightweight framework for cyber risk management in Western Balkan higher education institutions

Kepuska,

Tomasevic

2024

PeerJ Computer Science

View full text Add to dashboard Cite

Higher education institutions (HEIs) have a significant presence in cyberspace. Data breaches in academic institutions are becoming prevalent. Online platforms in HEIs are a new learning mode, particularly in the post-COVID era. Recent studies on information security indicate a substantial increase in cybersecurity attacks in HEIs, because of their decentralized e-learning structure and diversity of users. In Western Balkans, there is a notable absence of incident response plans in universities, colleges, and academic institutions. Moreover, e-learning management systems have been implemented without considering security. This study proposes a cybersecurity methodology called a lightweight framework with proactive controls to address these challenges. The framework aims to identify cybersecurity vulnerabilities in learning management systems in Western Balkan countries and suggest proactive controls based on a penetration test approach.

show abstract

Section: Resultsmentioning

confidence: 99%