Security in WEB Applications, Definitions, Risks and Tools

Abstract

Security in WEB applications has become a major concern for the scien- tific and business communities today. An increasing amount of money is being spent for handling information security. . Therefore, giving the proper importance of han- dling information security, the paper focuses on: definitions of software security, vulnerabilities and risks, dealing with various threats and vulnerabilities, the risk ranking created by OWASP (Open Web Application Security Project) and describes different tools that can be used for security within a Web application using a test, some of them are Zed Attack Proxy (ZAP), BeEF (The Browser Exploitation Framework), Burp Suite, PeStudio, Xenotix XSS Exploit Framework, Lynis, Recon- ng, Suricata, WPScan, and O-Saft (OWASP SSL Advanced Forensic Tool).