{"id":"https://openalex.org/W2735129343","doi":"https://doi.org/10.1109/bigdatasecurity.2017.47","title":"Web Application Security Tools Analysis","display_name":"Web Application Security Tools Analysis","publication_year":2017,"publication_date":"2017-05-01","ids":{"openalex":"https://openalex.org/W2735129343","doi":"https://doi.org/10.1109/bigdatasecurity.2017.47","mag":"2735129343"},"language":"en","primary_location":{"id":"doi:10.1109/bigdatasecurity.2017.47","doi":"https://doi.org/10.1109/bigdatasecurity.2017.47","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdatasecurity.2017.47","pdf_url":null,"source":{"id":"https://openalex.org/S7407086278","display_name":"IEEE International Conference on Big Data Security on Cloud, IEEE International Conference on High Performance and Smart Computing, and IEEE International Conference on Intelligent Data and Security (BigDataSecurity/HPSC/IDS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 3rd International Conference on Big Data Security on Cloud (BigDataSecurity), IEEE International Conference on High Performance and Smart Computing, (HPSC) and IEEE International Conference on Intelligent Data and Security (IDS)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012605027","display_name":"Abdulrahman Alzahrani","orcid":"https://orcid.org/0009-0002-4402-084X","observed_orcids":["https://orcid.org/0009-0002-4402-084X"]},"institutions":[{"id":"https://openalex.org/I177721651","display_name":"Oakland University","ror":"https://ror.org/01ythxj32","country_code":"US","type":"education","lineage":["https://openalex.org/I177721651"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdulrahman Alzahrani","raw_affiliation_strings":["Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA","institution_ids":["https://openalex.org/I177721651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059949408","display_name":"Ali Alqazzaz","orcid":"https://orcid.org/0000-0001-7721-0450","observed_orcids":["https://orcid.org/0000-0001-7721-0450"]},"institutions":[{"id":"https://openalex.org/I177721651","display_name":"Oakland University","ror":"https://ror.org/01ythxj32","country_code":"US","type":"education","lineage":["https://openalex.org/I177721651"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ali Alqazzaz","raw_affiliation_strings":["Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA","institution_ids":["https://openalex.org/I177721651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111035393","display_name":"Ye Zhu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I177721651","display_name":"Oakland University","ror":"https://ror.org/01ythxj32","country_code":"US","type":"education","lineage":["https://openalex.org/I177721651"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ye Zhu","raw_affiliation_strings":["Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA","institution_ids":["https://openalex.org/I177721651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083522562","display_name":"Huirong Fu","orcid":"https://orcid.org/0000-0002-0462-0587","observed_orcids":["https://orcid.org/0000-0002-0462-0587","https://orcid.org/0009-0001-7183-8981"]},"institutions":[{"id":"https://openalex.org/I177721651","display_name":"Oakland University","ror":"https://ror.org/01ythxj32","country_code":"US","type":"education","lineage":["https://openalex.org/I177721651"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huirong Fu","raw_affiliation_strings":["Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Oakland University, Rochester, MI, USA","institution_ids":["https://openalex.org/I177721651"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051712678","display_name":"Nabil Almashfi","orcid":"https://orcid.org/0000-0003-0775-3710","observed_orcids":["https://orcid.org/0000-0003-0775-3710"]},"institutions":[{"id":"https://openalex.org/I102607778","display_name":"Cleveland State University","ror":"https://ror.org/002tx1f22","country_code":"US","type":"education","lineage":["https://openalex.org/I102607778"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nabil Almashfi","raw_affiliation_strings":["Electrical and Computer Engineering Department, Cleveland State University, Cleveland, OH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering Department, Cleveland State University, Cleveland, OH, USA","institution_ids":["https://openalex.org/I102607778"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.614,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":{"value":0.86210974,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"237","last_page":"242"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12601","display_name":"Web Applications and Data Management","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":1.0},{"id":"https://openalex.org/keywords/security-vulnerabilities","display_name":"security vulnerabilities","score":0.6600000262260437},{"id":"https://openalex.org/keywords/vulnerability-scanning-tools","display_name":"vulnerability scanning tools","score":0.8849999904632568},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":0.8450000286102295},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":1.0},{"id":"https://openalex.org/keywords/information-leakage","display_name":"information leakage","score":0.9110000133514404},{"id":"https://openalex.org/keywords/web-application-architecture","display_name":"web application architecture","score":0.8790000081062317},{"id":"https://openalex.org/keywords/tool-evaluation","display_name":"tool evaluation","score":0.7319999933242798}],"concepts":[{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.8942068815231323},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7942099571228027},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.7373273372650146},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6132557392120361},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.5972394943237305},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5597779750823975},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5453412532806396},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.5361087322235107},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5144324898719788},{"id":"https://openalex.org/C97200028","wikidata":"https://www.wikidata.org/wiki/Q1196135","display_name":"Web engineering","level":5,"score":0.5130888223648071},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.5101897716522217},{"id":"https://openalex.org/C182321512","wikidata":"https://www.wikidata.org/wiki/Q1153289","display_name":"Web standards","level":3,"score":0.48677942156791687},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.4799535572528839},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.35999608039855957},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3429645001888275},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3050462007522583},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.23237988352775574},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/bigdatasecurity.2017.47","doi":"https://doi.org/10.1109/bigdatasecurity.2017.47","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdatasecurity.2017.47","pdf_url":null,"source":{"id":"https://openalex.org/S7407086278","display_name":"IEEE International Conference on Big Data Security on Cloud, IEEE International Conference on High Performance and Smart Computing, and IEEE International Conference on Intelligent Data and Security (BigDataSecurity/HPSC/IDS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 3rd International Conference on Big Data Security on Cloud (BigDataSecurity), IEEE International Conference on High Performance and Smart Computing, (HPSC) and IEEE International Conference on Intelligent Data and Security (IDS)","raw_type":"proceedings-article"},{"id":"pmh:oai:RePEc:rfa:smcjnl:v:5:y:2017:i:2:p:118-131","doi":null,"is_oa":false,"landing_page_url":"http://redfame.com/journal/index.php/smc/article/view/2663/2984","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W98259791","https://openalex.org/W127520583","https://openalex.org/W1499510052","https://openalex.org/W1504715865","https://openalex.org/W1505465226","https://openalex.org/W1663388364","https://openalex.org/W1785492489","https://openalex.org/W1979931683","https://openalex.org/W2003505783","https://openalex.org/W2036739077","https://openalex.org/W2056777262","https://openalex.org/W2109026747","https://openalex.org/W2119028650","https://openalex.org/W2162875383","https://openalex.org/W2181283584","https://openalex.org/W2209768828","https://openalex.org/W2478098398","https://openalex.org/W2508641559","https://openalex.org/W2800487524","https://openalex.org/W3125877673","https://openalex.org/W4210531213","https://openalex.org/W4243607364","https://openalex.org/W6750995706"],"related_works":["https://openalex.org/W7095372438","https://openalex.org/W6960113401","https://openalex.org/W7100253461","https://openalex.org/W2056777262","https://openalex.org/W4296149516","https://openalex.org/W7214917041","https://openalex.org/W2909432651","https://openalex.org/W4323317130","https://openalex.org/W7216915104","https://openalex.org/W2504194819"],"abstract_inverted_index":{"Strong":[0],"security":[1,29,92,133],"in":[2,124],"web":[3,21,25,73,84,125,140],"applications":[4,85],"is":[5],"critical":[6],"to":[7,118,132,138,146],"the":[8,40,50,55,66,72,81,90,113,139],"success":[9],"of":[10,39,49,83],"your":[11],"online":[12],"presence.":[13],"Security":[14],"importance":[15],"has":[16],"grown":[17],"massively,":[18],"especially":[19],"among":[20],"applications.":[22,126],"Dealing":[23],"with":[24],"application":[26],"or":[27],"website":[28],"issues":[30],"requires":[31,58],"deep":[32,59],"insight":[33],"and":[34,61,71,88,105,135,143],"planning,":[35],"not":[36],"only":[37],"because":[38,48],"many":[41],"tools":[42,57,114,130],"that":[43,115],"are":[44,116],"available":[45],"but":[46],"also":[47],"industry":[51],"immaturity.":[52],"Thus,":[53],"finding":[54],"proper":[56],"understanding":[60],"several":[62],"steps,":[63],"including":[64],"analyzing":[65],"development":[67],"environment,":[68],"business":[69],"needs,":[70],"applications'":[74,141],"complexity.":[75],"In":[76,108],"this":[77,110],"paper,":[78],"we":[79],"demonstrate":[80],"architecture":[82],"then":[86],"list":[87],"evaluate":[89],"widespread":[91,122],"vulnerabilities.":[93],"Those":[94],"vulnerabilities":[95,123,134],"are:":[96],"Insufficient":[97],"Transport":[98],"Layer":[99],"Protection,":[100],"Information":[101],"Leakage,":[102],"Cross-Site":[103],"Scripting,":[104],"SQL":[106],"Injection.":[107],"addition,":[109],"paper":[111],"analyzes":[112],"used":[117],"scan":[119],"for":[120],"these":[121],"Finally,":[127],"it":[128],"evaluates":[129],"due":[131],"gives":[136],"recommendations":[137],"users":[142],"administrators":[144],"aiming":[145],"educate":[147],"them.":[148]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":4}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2017-07-21T00:00:00"}