Year: 2024
Type: article
Abstract: Web application security remains a critical challenge in mitigating vulnerabilities that expose sensitive data and systems to cyberattacks. This paper addresses recent trends in the vulnerability of web applications to cyber-attacks. It explores the implementation and evaluation of security mechanisms in web services guided by the OWASP Top 10 framework. The OWASP Analyzer – a test application prepared to simulate the Broken Access Control, SQL Injection, and Cross-Site Scripting attacks – was executed in three realistic scenarios: web applications without any protection mechanism, essential safeguards, and advanced measures. The experimental results demonstrate the effectiveness of layered security strategies and highlight the best practices, such as role-based access control, secure cryptographic methods, and comprehensive logging. This research underscores the necessity of integrating robust security measures throughout the development lifecycle to safeguard against evolving threats.
DOI: 10.60097/acig/199521
Authors: Mateusz Nawrocki, Joanna Kołodziej
Institution: Cracow University of Technology
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W4408169136