Web Application Penetration Testing And Vulnerability Mitigation Using OWASP Top 10
TL;DR
A web application penetration testing framework that helps identify, classify, and mitigate security vulnerabilities in web applications is proposed based on the OWASP Top 10 and leverages several security tools to detect vulnerabilities with higher accuracy and a minimized number of false-positive outcomes.
Abstract
Web applications are ubiquitous and serve various business and technical functions. As the number of web applications continues to increase, they are also becoming one of the most common targets for cyber-attacks. This paper proposes a web application penetration testing framework that helps identify, classify, and mitigate security vulnerabilities in web applications. The proposed framework is based on the OWASP Top 10 and leverages several security tools to detect vulnerabilities with higher accuracy and a minimized number of false-positive outcomes. The proposed framework classifies detected vulnerabilities based on their categories and assigns a priority level to the detected vulnerabilities based on their risk assessment. Mitigation recommendations are also provided along with a complete security report that helps developers in strengthening the application security. The effectiveness of the proposed framework is evaluated using a number of web applications including DVWA and OWASP Juice Shop.