Web Application Security: Threats, Countermeasures, and Pitfalls
Hsiu-Chuan Huang, Zhikai Zhang, Hao‐Wen Cheng, Shiuhpyng Winston Shieh · Computer · 2017
Penetration testing is a crucial defense against common Web application security threats such as SQL injection and cross-site scripting attacks. A proposed Web vulnerability scanner automatically generates test data with combinative evasion techniques, significantly expanding test coverage and revealing more vulnerabilities.