Architecture of Web-Based Intellectual Vulnerability Scanners for OWASP Web Application Auditing Process

Abstract

Nowadays, many business applications such as online banking, e-insurance, e-commerce, mail, etc., are often made as web

applications. The rapid popularization and the usage of web technology everywhere, transition of traditional business into the sphere of

web applications has made them more attractive to attack for hackers, with the aim to steal confidential user information and use this

information for personal gain. Vulnerability scanners are often used in web application security assessments, but there are few properly

developed web-based vulnerability scanners, that used intellectual expert based tools. Development of intellectual web-based security

scanners for OWASP security standard has high demand in security auditing area. Expert systems in vulnerability scanners can increase

effectiveness and decrease a cost of OWASP auditing process.