Vulnerability Analysis in Web Distributed Applications
Ion Ivan, Dragoş Palaghiţă, Sorin Vinturis, Mihai Doinea · 2011
Abstract: The paper analyze vulnerabilities found on web based distributed applications from different perspectives. Classes of vulnerabilities types are identified in order to cope with their different characteristics that each one develops. Methods for analyzing vulnerabilities of an authentication process are developed and solutions are proposed. A model for vulnerability minimization is discussed based on an indicator built on the amount of sensitive data revealed to the end users. Risks are analyzed together with the vulnerabilities that they exploit and measures are identified to combat these pairs. Key-words: security, vulnerabilities, risks, optimization, distributed applications. 1. Vulnerability Types Vulnerabilities are constituted in classes which are susceptible to certain types of attacks. Authentication is the vulnerability class that is opened to attacks that aim to corrupt validation procedures meant to establish the identity of application users.