A cloud based system to sense security vulnerabilities of web application in open-source private cloud IAAS

摘要

In present times the use of web applications has become a necessity in our daily routine such as online shopping, banking, reading news and such similar activities. It is observed that in web based applications security aspect is ignored by many developers which may lead to major loss of information and put a question on confidentiality of the user data. Mostly due to the lack of security awareness, expertise and sometimes constant stress on the developer to complete the task within given dead line causes severe web vulnerabilities. In this paper, a new innovative service model is proposed which brings new opportunity on demand service pool. This is achieved with the help of virtualization, cloud computing and sharing different resources over a private cloud environment. A cloud based static analysis system for unmasking security vulnerabilities in PHP is proposed in this paper. The proposed system will help a user to identify factors affecting the vulnerabilities on a user system and point out the tainted code within the source code.