Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing

Abstract

Usage of website is increasing due to its ease of access. An increase in website users should be accompanied by an increase in website security to prevent unwanted things, such as data breach. Penetration testing is used to reduce risk due to security factors. OWASP has Web Security Testing Guide (WSTG) with 12 test types. Not all tests can be tested, but there are patterns that can be used as a reference whether the test is possible or not. This pattern can be used to automate test mapping for each endpoint. Thus, penetration tester does not need to do it manually.