Black-Box assessment of Web systems security

Black-Box assessment of Web systems security

Senesi, M.

Gross, H.G. (mentor)
Van Vliet, F. (mentor)

Electrical Engineering, Mathematics and Computer Science

Department of Software Technology

Computer Science - track Software Engineering

2012-04-25

Many companies rely on Web applications to promote their services to the world. It is a logical step, as the Web offers great advantages such as convenience, low cost and instant reachability from anywhere in the world. Meanwhile Web applications tend to be implemented in an insecure way and the attacker does not even need to be too experienced to break into the companies over the Internet. Black-box penetration testing is very helpful in the assessment of Web systems security as it simulates such an attack. The aim of this thesis is to design and evaluate a structured methodology that any software developer can use to perform a black-box penetration test on Web systems to detect and prevent the most dangerous Web vulnerabilities.

hacking
web
penetration testing
black box
security
testing
sql injection
cross site scripting
file upload
command injection
filename injection
path traversal
cross site request forgery
sanitization
filtering

http://resolver.tudelft.nl/uuid:fd98efb8-8225-4eea-bf6c-5f56a2d022f5

Student theses

master thesis

(c) 2012 Senesi, M.