Web Application Penetration Testing Through Rule-Based Inference on Knowledge Graphs
Francesco Caturano, Emanuele De Martino, Gaetano Perrone, Simon Pietro Romano · 2023
Organizations are always at risk of security breaches caused by web vulnerabilities. In order to address this issue, security experts perform web application penetration testing as a proactive measure to identify vulnerabilities before they can be exploited. These experts have established methodologies that provide valuable insights for carrying out thorough assessments. This work aims to propose a knowledge base that models well-founded web application penetration testing methodologies. By combining the expertise of security professionals with knowledge graphs and logical inference models, it is possible to successfully replicate these methodologies in a manner that holds great promise for enhancing the effectiveness of security assessments.