DEVELOPMENT OF A WEB APPLICATION SECURITY ANALYZER BASED ON NETWORK ATTACK MODELING

Rusakov Alexey Mikhailovich, Filatov Vyacheslav Valeryevich, Dolzhenkov Sergey Sergeevich, Golubev Daniil Dmitrievich, Saraev Daniil Andreevich, Shakhidzhanyan Andrey Albertovich

The article discusses the basics of web application security, including the different types of attacks that can be performed on web applications. It defines a model of current threats to web applications, highlighting the causes of vulnerabilities. Described the types of attacks such as: injection attacks and authentication and access control vulnerabilities. Reviewed and described the methods of vulnerabilities detection, implemented in the developed solution using special tools. Considered the unique approach to detection and identification of vulnerabilities of the developed security analyzer. Also, the technical aspects of the application are covered, with details of the backend and frontend. The key modules and functions that make the web-application security analyzer operational are described.

Keywords:Web application security analysis, vulnerability detection, web-application security threat model, web application security analyzer development