Web Vulnerability Detection through Penetration Testing Evaluation

Abstract

 

Sure, here is the translation of the text into English:

Pentesting: A Crucial Technique for Fortifying Cybersecurity

In recent years, security administrators have influenced software developers to design software more resistant to malicious software attacks. They have also influenced security methodologies and techniques that support the detection of vulnerabilities in a company's information infrastructure. Based on the emergence of fraud and information theft suffered by organizations, the pentesting (penetration testing) practice has emerged. It is one of the most innovative techniques in the field of Information Security.

This technique is a way to detect vulnerabilities after they have been implemented, benefiting a company in reinforcing those flaws that attackers could exploit. Therefore, the main goal is to find vulnerabilities in web applications. With pentesting, an exhaustive tracking of all vulnerabilities that can be found will be carried out. The impacts and the probability of exploitation of each vulnerability found will also be qualified according to the standard vulnerability scoring scheme based on the OWASP methodology.

In addition, the vulnerabilities will be classified according to the consequences of the exploitation identified through the findings. Therefore, a report will be provided with a recommendation for each vulnerability to mitigate or stop the threat. Vulnerability tracking will be based on work processes and innovative ways to protect any web application from threats. This report would help developers, providers, and users of web applications to better understand the potential security problems related to web applications and how they should be treated.

One way to test the robustness of a site is to perform a test in such a way that it can be attacked. This technique is called penetration testing (Pentesting in English). Before launching a site, the security of the network and the web application must be completely secure and tested. This study aims to find weaknesses and flaws in web applications. The penetration test will collect information about network strength, security holes, and access. The result of the report is to indicate the recommendations to improve the security of an organization's infrastructure. Regarding the results of the penetration tests, the interested organization or company can correct the vulnerabilities that exist on the website.

The importance of having a strong system against attacks and infiltrations is to avoid vulnerabilities, which are exploited by a malicious attacker (attacker/hacker), so it can affect the confidentiality, integrity, and availability of a web application or distributed information.