A Clustering Approach for Web Vulnerabilities Detection

A. Dessiatnikoff, R. Akrout, E. Alata, M. Kaaniche, V. Nicomette
2011 2011 IEEE 17th Pacific Rim International Symposium on Dependable Computing  
This paper presents a new algorithm aimed at the vulnerability assessment of web applications following a blackbox approach. The objective is to improve the detection efficiency of existing vulnerability scanners and to move a step forward toward the automation of this process. Our approach covers various types of vulnerabilities but this paper mainly focuses on SQL injections. The proposed algorithm is based on the automatic classification of the responses returned by the web servers using
more » ... clustering techniques and provides especially crafted inputs that lead to successful attacks when vulnerabilities are present. Experimental results on several vulnerable applications and comparative analysis with some existing tools confirm the effectiveness of our approach.
doi:10.1109/prdc.2011.31 dblp:conf/prdc/DessiatnikoffAAKN11 fatcat:iozzoogvsvegrlizyvufygfixy