SCWAD: Automated Pentesting of Web Applications - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2024

SCWAD: Automated Pentesting of Web Applications

Résumé

A wide array of techniques and tools can be employed for web application security assessment. Some methods, such as fuzzers and scanners, are partially or fully automated, offering speed and cost-effectiveness. However, these tools often fall short in detecting specific vulnerabilities like broken access control and are prone to generating false positives. On the other hand, manual processes like penetration testing, though more time-consuming and necessitating expertise, provide a more comprehensive risk assessment. To overcome the limitations of automated tools, these techniques are frequently combined. Fuzzers and scanners, despite their ease of use and quick results, require the expertise of penetration testing experts to address their limitations. By integrating these approaches, a more robust and nuanced security assessment can be achieved. This article presents SCWAD, an automated and customizable penetration testing framework designed to assess vulnerabilities in web applications.
Fichier principal
Vignette du fichier
main.pdf (276.48 Ko) Télécharger le fichier

Dates et versions

hal-04874868 , version 1 (09-01-2025)

Licence

Identifiants

Citer

Natan Talon, Valérie Viet Triem Tong, Gilles Guette, Yufei Han, Youssef Laarouchi. SCWAD: Automated Pentesting of Web Applications. SECRYPT 2024 - 21st International Conference on Security and Cryptography, Jul 2024, Dijon, France. pp.424 - 433, ⟨10.5220/0012721000003767⟩. ⟨hal-04874868⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More