A source code perspective framework to produce secure web applications. Issue 10 (October 2019)

• Record Type: Journal Article
• Authors: Agrawal, Alka; Alenezi, Mamdouh; Kumar, Rajeev; Khan, Raees Ahmad
• Is Part Of: Computer fraud & security. Issue 10(2019)
• Page Start: 11
• Page End: 18
• Publication Date: 2019-10
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(19)30107-1
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : Hackers and other cyber attackers remain fearless concerning the mitigation mechanisms that have evolved for addressing security over the past few years. Cyber attacks are on the rise and countless security breaches take place daily. It is believed that cybercrime in its various forms will cost the world $6tr per year by 2021. 1 It has become essential that software companies evaluate their businesses to identify application security needs, strategies and weaknesses. Establishing a security policy to safeguard their software applications has become an urgent need. Vulnerable applications are the bane of the software industry. Software companies need to make sure that their developers write more secure code, but developers struggle with this issue. To encourage developers to write secure source code, there is a need to integrate the whole process of scanning, detecting and mitigating security vulnerabilities and flaws during code analysis. Alka Agrawal, Mamdouh Alenezi, Rajeev Kumar and Raees Ahmad Khan propose an integrated and prescriptive framework intended to identify and mitigate vulnerabilities and provide suggestions for writing more secure code.