Dynamic Application Web Security Testing

Marchand-Niño W.-R.; Jara-Linares J.-L. · Applications in Software Engineering - Proceedings of the 14th International Conference on Software Process Improvement, CIMPS 2025 (2025) · DOI: 10.1109/cimps69356.2025.11419699

Resumen

The workshop addresses dynamic web application security analysis techniques in black-box and gray-box modes, observing the real-time behavior of a web application while interacting with it with and without credentials, using tools such as Burp Suite, with the purpose of identifying potential technological and business logic vulnerabilities. Exercises are carried out in accordance with the web application security controls defined by OWASP, focusing on the top ten vulnerabilities such as injections, poor access control, authentication failures, among others.

Instituciones: Universidad Nacional Agraria de la Selva