Abstract : | From the last twenty five years, the web has evolved into an important part of our lives. There are web applications for every kind of job and activity. In parallel, all this situation is very attractive for attackers who want to manipulate users’ data and other sensitive information. For this reason web applications are needed to be secure for every user. In this thesis we discuss many types of web attacks and vulnerabilities, giving examples of the way the attackers exploit these assailable parts. We also discuss about the defense ways and the use of detection and prevention tools. Finally we have to be referred that this analysis is guided by the OWASP Top Ten 2013.
|
---|