AlphaSecure: A state of the art framework for Web Application Vulnerabilities Detection and Patch Recommendation Using Automated Techniques
Year: 2024
Type: conference-paper
Abstract: The increasing number of web applications is primarily driven by their widespread use as a means of delivering services over the Internet. However, the development of such applications by inexperienced individuals and without proper testing has resulted in substantial vulnerabilities. Web application vulnerabilities represent weaknesses that emerge during the design phase of these applications. Attackers frequently exploit these vulnerabilities to gain unauthorized access to internal components, compromise the application's integrity, manipulate data, and steal sensitive information. The increasing prevalence of web applications has heightened the urgency for robust security measures to safeguard sensitive data and prevent unauthorized access. Manual detection of vulnerabilities in web applications has become increasingly arduous and time-consuming in the face of rapidly evolving cyber threats. Automated techniques offer a promising solution for efficiently identifying and mitigating potential security risks. AlphaSecure automated approaches to detecting web application vulnerabilities, including static analysis, dynamic analysis, and hybrid techniques. It discusses the strengths and limitations of each approach, emphasizing the importance of comprehensive coverage and accuracy in vulnerability detection. There are various types of attacks can be performed over a web application to take it down and exploit it and steel the sensitive data from it. To avoid this, we are proposing a self-assessment framework which can detect the common vulnerability in web application having capability to suggest some patches for them. AlphaSecure is a framework which cover thirty-six types of vulnerability assessment and with 51 type of test to cover all most common vulnerability detection mechanism and guidance to mitigate them.
Authors: Kushagra Ojha, Aryan Mishra, Riya Mishra, Ravi Shankar Jha, Ankit Nainwal
Institution: Dehradun Institute of Technology University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4403854089