DPLOOP: Detection and Prevention of Loopholes in Web Application Security

摘要

Web application loopholes are related to different components. Defeat correctly sanitized users' given input is one of the prominent features that accompany to run illegal snippets in such type of programs. Due to the absence of proper input sanitization, common loopholes occur in web applications, such as SQL, Cross-site Scripting (XSS), XML, CSRF, and LDAP. Thus, research work presented in this paper deliberates possible methods to detect and mitigate vulnerabilities in order to prevent organizational websites against SQL and XSS loopholes. We have analyzed a dataset of URLs. SQL, XSS, and XML have the highest rate of detection and the least percentage of CSRF.