Cybersecurity Test Automation: Experiences with RPA tools and ZAP Technologies Using ASL4RPA
Carlos Correia, Alberto Rodrigues da Silva, Victor J. A. S. Lobo · 2024
Nowadays, it is imperative to prioritize the establishment of solid cybersecurity protocols. This paper presents an innovative work that discusses the combination of robotic process automation (RPA) tools (namely with Robot Framework and Robocorp) with the ZAP scanner tool, supported by the ASL4RPA language (aka Application Specification Language for Robotic Process Automation). Our study embarks on a comprehensive journey to automate cybersecurity tests, aiming to enhance the efficiency and effectiveness of vulnerability detection and mitigation strategies in web applications. ASL4RP A is a platform-independent specification language that bridges the gap between complex cybersecurity testing requirements and the execution of automated tests. The proposed approach standardizes the automation process across different RP A tools and ensures seamless integration with ZAP, a leading open-source tool for security testing. We evaluate the performance, scalability, and reliability of combining RP A tools with ZAP to automate security testing tasks through a series of designed experiments. Our findings reveal that the synergy between RP A tools and ZAP, orchestrated through ASL4RP A, significantly accelerates the testing process, reduces manual effort, and enhances the discovery of vulnerabilities. Moreover, this integration introduces an original methodology for conducting security tests, offering a scalable and efficient solution to combat the growing sophistication of cyber threats. This paper contributes to the body of knowledge by demonstrating the practical applications and benefits of leveraging RP A tools in conjunction with ZAP for cybersecurity test automation. Furthermore, it underscores the pivotal role of ASL4RP A in facilitating this integration, covering the way for future research and development in automated security testing technologies.