STUDY OF VARIOUS ATTACKS AND TOOLS FOR WEB APPLICATIONS SECURITY

Abstract

In today's era of hyper connected world, Web applications provide us a convenient way to access information. Major business and commercial transactions are now performed via these web applications. To name a few areas, web applications are used in Banking, Retail, Healthcare, Automobile, Education etc domains. Securing the user data and transactions on these web applications becomes the utmost important goal for any organization. The applications are becoming more complex as the user demand is increasing
for more functionality. This has resulted in possible security flaws being exposed to potential hackers. The attacks are being carried out in multiple layers of the web applications including client side and server side and vary from SQL Injection to XSS, DOS etc. In order to avoid any data theft or modification, additional measures are required to detect and prevent any breach to the web applications security. This paper presents the various kinds of attacks possible on a web application and the tools available to handle such
attacks. Every tool has its own capabilities and set of limitations. The paper discusses about the attacks in detail and maps each tool with the features it provides.