Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing

Bekti Cahyo Hidayanto; Izzat Aulia Akbar; Achmad Zaenuri Dahlan Putra

doi:10.1016/j.procs.2024.03.140

Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing

Bekti Cahyo Hidayanto, Izzat Aulia Akbar^*, Achmad Zaenuri Dahlan Putra

^*Corresponding author for this work

Institut Teknologi Sepuluh Nopember

Research output: Contribution to journal › Conference article › peer-review

1 Citation (Scopus)

Abstract

Usage of website is increasing due to its ease of access. An increase in website users should be accompanied by an increase in website security to prevent unwanted things, such as data breach. Penetration testing is used to reduce risk due to security factors. OWASP has Web Security Testing Guide (WSTG) with 12 test types. Not all tests can be tested, but there are patterns that can be used as a reference whether the test is possible or not. This pattern can be used to automate test mapping for each endpoint. Thus, penetration tester does not need to do it manually.

Original language	English
Pages (from-to)	1412-1419
Number of pages	8
Journal	Procedia Computer Science
Volume	234
DOIs	https://doi.org/10.1016/j.procs.2024.03.140
Publication status	Published - 2024
Externally published	Yes
Event	7th Information Systems International Conference, ISICO 2023 - Washington, United States Duration: 26 Jul 2023 → 28 Jul 2023

Keywords

Penetration testing
automation
owasp
report
web security

Access to Document

10.1016/j.procs.2024.03.140

Cite this

@article{7bfad07d902047fe83a172deaa95d3e7,

title = "Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing",

abstract = "Usage of website is increasing due to its ease of access. An increase in website users should be accompanied by an increase in website security to prevent unwanted things, such as data breach. Penetration testing is used to reduce risk due to security factors. OWASP has Web Security Testing Guide (WSTG) with 12 test types. Not all tests can be tested, but there are patterns that can be used as a reference whether the test is possible or not. This pattern can be used to automate test mapping for each endpoint. Thus, penetration tester does not need to do it manually.",

keywords = "Penetration testing, automation, owasp, report, web security",

author = "Hidayanto, {Bekti Cahyo} and Akbar, {Izzat Aulia} and Putra, {Achmad Zaenuri Dahlan}",

note = "Publisher Copyright: {\textcopyright} 2023 The Authors. Published by Elsevier B.V.; 7th Information Systems International Conference, ISICO 2023 ; Conference date: 26-07-2023 Through 28-07-2023",

year = "2024",

doi = "10.1016/j.procs.2024.03.140",

language = "English",

volume = "234",

pages = "1412--1419",

journal = "Procedia Computer Science",

issn = "1877-0509",

publisher = "Elsevier B.V.",

}

TY - JOUR

T1 - Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing

AU - Hidayanto, Bekti Cahyo

AU - Akbar, Izzat Aulia

AU - Putra, Achmad Zaenuri Dahlan

PY - 2024

Y1 - 2024

N2 - Usage of website is increasing due to its ease of access. An increase in website users should be accompanied by an increase in website security to prevent unwanted things, such as data breach. Penetration testing is used to reduce risk due to security factors. OWASP has Web Security Testing Guide (WSTG) with 12 test types. Not all tests can be tested, but there are patterns that can be used as a reference whether the test is possible or not. This pattern can be used to automate test mapping for each endpoint. Thus, penetration tester does not need to do it manually.

AB - Usage of website is increasing due to its ease of access. An increase in website users should be accompanied by an increase in website security to prevent unwanted things, such as data breach. Penetration testing is used to reduce risk due to security factors. OWASP has Web Security Testing Guide (WSTG) with 12 test types. Not all tests can be tested, but there are patterns that can be used as a reference whether the test is possible or not. This pattern can be used to automate test mapping for each endpoint. Thus, penetration tester does not need to do it manually.

KW - Penetration testing

KW - automation

KW - owasp

KW - report

KW - web security

UR - http://www.scopus.com/inward/record.url?scp=85193200606&partnerID=8YFLogxK

U2 - 10.1016/j.procs.2024.03.140

DO - 10.1016/j.procs.2024.03.140

M3 - Conference article

AN - SCOPUS:85193200606

SN - 1877-0509

VL - 234

SP - 1412

EP - 1419

JO - Procedia Computer Science

JF - Procedia Computer Science

T2 - 7th Information Systems International Conference, ISICO 2023

Y2 - 26 July 2023 through 28 July 2023

ER -

Automated Web Security Testing Guide Mapping to Accelerate Process on Penetration Testing

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this