A Framework for Analyzing Risk of Web Application Vulnerabilities

Jignesh Doshi, Bhushan Trivedi

Abstract Web applications are widely used for business. Many transactions are taking place on web. On other side of coin, number of attacks has grown. Attackers use various means of compromising application security. As a result it has been found that many websites are vulnerable. Web application security has become one of the major threats to an organization. It seems that for organizations to be effective, Risk Management must be a management function. This paper is based on an empirical study of Top 10 Open Web Application Security Projects risks. This paper is representing a risk assessment and mitigation framework using hybrid (multiple) risk measures. Moreover, the findings of our empirical study suggest that effective Risk management is based on collaboration (multiple measures) and the establishment of joint and common risk management processes. Keywords: Vulnerability analysis, SQL Injection, Risk Management, Risk Exposure, FMEA, Risk Mitigation

Title:	A Framework for Analyzing Risk of Web Application Vulnerabilities
Author Name:	Jignesh Doshi, Bhushan Trivedi
Abstract:	Abstract Web applications are widely used for business. Many transactions are taking place on web. On other side of coin, number of attacks has grown. Attackers use various means of compromising application security. As a result it has been found that many websites are vulnerable. Web application security has become one of the major threats to an organization. It seems that for organizations to be effective, Risk Management must be a management function. This paper is based on an empirical study of Top 10 Open Web Application Security Projects risks. This paper is representing a risk assessment and mitigation framework using hybrid (multiple) risk measures. Moreover, the findings of our empirical study suggest that effective Risk management is based on collaboration (multiple measures) and the establishment of joint and common risk management processes. Keywords: Vulnerability analysis, SQL Injection, Risk Management, Risk Exposure, FMEA, Risk Mitigation
Cite this article:	Jignesh Doshi, Bhushan Trivedi , " A Framework for Analyzing Risk of Web Application Vulnerabilities " , International Journal of Emerging Trends & Technology in Computer Science (IJETTCS), Volume 3, Issue 4, July - August 2014 , pp. 233-237 , ISSN 2278-6856.
Full Text [PDF] Home