Penetration Testing for Web Services.

Web services are often deployed with critical software security faults that open them to malicious attack. Penetration testing using commercially available automated tools can help avoid such faults, but new analysis of several popular testing tools reveals significant failings in their performance....

Descripción completa

Detalles Bibliográficos
Publicado en:Computer (00189162) Vol. 47; no. 2; pp. 30 - 37
Autores principales: Antunes, Nuno, Vieira, Marco
Formato: Artículo
Publicado: IEEE Feb2014
Materias:
Acceso en línea:Ver este registro en EBSCOhost
fields @attributes:
  recordID: 1
pdfLink:
plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=94842000&site=ehost-live
header:
  @attributes:
    shortDbName: hlh
    uiTerm: 94842000
    longDbName: Humanities International Complete
    uiTag: AN
  controlInfo:
    bkinfo:
    jinfo:
      jid:
        00189162
        PUT
      jtl: Computer (00189162)
      issn: 00189162
      maglogo: N
    pubinfo:
      dt: Feb2014
      vid: 47
      iid: 2
      pid: 13605
      pub: IEEE
    artinfo:
      ui:
        94842000
        10.1109/MC.2013.409
      ppf: 30
      ppct: 7
      formats:
      tig:
        atl: Penetration Testing for Web Services.
      aug:
        au:
          Antunes, Nuno
          Vieira, Marco
        affil: University of Coimbra, Portugal
      su:
        Penetration testing (Computer security)
        Web services
        Computer software security
        Malware prevention
        Data security failures
        Security systems
      sug:
        subj:
          Penetration testing (Computer security)
          Web services
          Computer software security
          Malware prevention
          Data security failures
          Security systems
      keyword:
        code vulnerabilities
        command injection
        Computers
        penetration testing
        Runtime
        Security
        Simple object access protocol
        SQL injection
        Testing
        vulnerability detection
        Web security scanners
      ab: Web services are often deployed with critical software security faults that open them to malicious attack. Penetration testing using commercially available automated tools can help avoid such faults, but new analysis of several popular testing tools reveals significant failings in their performance. The Web extra at http://youtu.be/COgKs9e679o is an audio interview in which authors Nuno Antunes and Marco Vieira describe how their analysis of popular testing tools revealed significant performance failures and provided important insights for future improvement.
      pubtype: Academic Journal
      doctype: Article
      src: R
    language: English
    refInfo:
    copyright:
      @attributes:
        flag: Y
      dt:
        @attributes:
          year: 2014
    holdings:
      @attributes:
        islocal: N