Web App Security: A Comparison and Categorization of Testing Frameworks

Satish M. Srinivasan; Raghvinder S. Sangwan

doi:10.1109/MS.2017.21

Web App Security: A Comparison and Categorization of Testing Frameworks

Satish M. Srinivasan, Raghvinder S. Sangwan

Engineering Division (Great Valley)

Research output: Contribution to journal › Article › peer-review

12 Scopus citations

Abstract

Web app developers often face challenges in using the many available security-testing frameworks, owing to those frameworks' inherent complexity and the lack of proper documentation. No up-to-date criteria exist that can help practitioners and organizations select an appropriate framework. Consequently, numerous vulnerabilities go undetected in the final product, creating a potential for major attacks. To help practitioners select the right framework, researchers classified 26 frameworks, using 27 criteria.

Original language	English (US)
Article number	7819409
Pages (from-to)	99-102
Number of pages	4
Journal	IEEE Software
Volume	34
Issue number	1
DOIs	https://doi.org/10.1109/MS.2017.21
State	Published - Jan 1 2017

All Science Journal Classification (ASJC) codes

Software

Access to Document

10.1109/MS.2017.21

Cite this

@article{b75c7dbdbaf0491dac64965949370c49,

title = "Web App Security: A Comparison and Categorization of Testing Frameworks",

abstract = "Web app developers often face challenges in using the many available security-testing frameworks, owing to those frameworks' inherent complexity and the lack of proper documentation. No up-to-date criteria exist that can help practitioners and organizations select an appropriate framework. Consequently, numerous vulnerabilities go undetected in the final product, creating a potential for major attacks. To help practitioners select the right framework, researchers classified 26 frameworks, using 27 criteria.",

author = "Srinivasan, {Satish M.} and Sangwan, {Raghvinder S.}",

note = "Publisher Copyright: {\textcopyright} 2017 IEEE.",

year = "2017",

month = jan,

day = "1",

doi = "10.1109/MS.2017.21",

language = "English (US)",

volume = "34",

pages = "99--102",

journal = "IEEE Software",

issn = "0740-7459",

publisher = "IEEE Computer Society",

number = "1",

}

TY - JOUR

T1 - Web App Security

T2 - A Comparison and Categorization of Testing Frameworks

AU - Srinivasan, Satish M.

AU - Sangwan, Raghvinder S.

PY - 2017/1/1

Y1 - 2017/1/1

N2 - Web app developers often face challenges in using the many available security-testing frameworks, owing to those frameworks' inherent complexity and the lack of proper documentation. No up-to-date criteria exist that can help practitioners and organizations select an appropriate framework. Consequently, numerous vulnerabilities go undetected in the final product, creating a potential for major attacks. To help practitioners select the right framework, researchers classified 26 frameworks, using 27 criteria.

AB - Web app developers often face challenges in using the many available security-testing frameworks, owing to those frameworks' inherent complexity and the lack of proper documentation. No up-to-date criteria exist that can help practitioners and organizations select an appropriate framework. Consequently, numerous vulnerabilities go undetected in the final product, creating a potential for major attacks. To help practitioners select the right framework, researchers classified 26 frameworks, using 27 criteria.

UR - http://www.scopus.com/inward/record.url?scp=85010369830&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85010369830&partnerID=8YFLogxK

U2 - 10.1109/MS.2017.21

DO - 10.1109/MS.2017.21

M3 - Article

AN - SCOPUS:85010369830

SN - 0740-7459

VL - 34

SP - 99

EP - 102

JO - IEEE Software

JF - IEEE Software

IS - 1

M1 - 7819409

ER -

Web App Security: A Comparison and Categorization of Testing Frameworks

Abstract

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this