Web Application Vulnerability Detection Using Taint Analysis and Black-box Testing
Heribertus Yulianton, Agung Trisetyarso, Wayan Suparta, Bahtiar Saleh Abbas, Chul Ho Kang · IOP Conference Series Materials Science and Engineering · 2020
Abstract Web applications continue to grow however web attacks are also increasing, this shows an increase in web application vulnerabilities. Several methods have been used to detect vulnerabilities in web applications such as black-box testing, dynamic analysis, and static analysis. In this article, we propose a framework for detecting web application vulnerabilities by combining all three methods. The strengths of one method are used to overcome the weaknesses of another method. This framework is believed to provide better results than if each method was used separately.