{"id":"https://openalex.org/W7223652609","doi":"https://doi.org/10.25019/zb7wnh69","title":"Enhanced web application security through advanced penetration testing techniques","display_name":"Enhanced web application security through advanced penetration testing techniques","publication_year":2026,"publication_date":"2026-10-26","ids":{"openalex":"https://openalex.org/W7223652609","doi":"https://doi.org/10.25019/zb7wnh69"},"language":"en","primary_location":{"id":"doi:10.25019/zb7wnh69","doi":"https://doi.org/10.25019/zb7wnh69","is_oa":true,"landing_page_url":"https://doi.org/10.25019/zb7wnh69","pdf_url":"https://scrd.eu/index.php/scrd/article/download/894/969","source":{"id":"https://openalex.org/S4387293025","display_name":"Smart Cities and Regional Development (SCRD) Journal","issn_l":"2537-3803","issn":["2537-3803","2821-7888"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314610","host_organization_name":"National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha","host_organization_lineage":["https://openalex.org/P4310314610"],"host_organization_lineage_names":["National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities and Regional Development (SCRD) Journal","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://scrd.eu/index.php/scrd/article/download/894/969","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070761479","display_name":"Dolantina Hyka","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dolantina HYKA","raw_affiliation_strings":["Mediterranean University of Albania, Tirana, Albania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mediterranean University of Albania, Tirana, Albania","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122987238","display_name":"Festim Kodra","orcid":"https://orcid.org/0009-0004-2837-9048","observed_orcids":["https://orcid.org/0009-0004-2837-9048"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Festim KODRA","raw_affiliation_strings":["Mediterranean University of Albania, Tirana, Albania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mediterranean University of Albania, Tirana, Albania","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5159645587","display_name":"Daniel \u00c7IKA","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel \u00c7IKA","raw_affiliation_strings":["Mediterranean University of Albania, Tirana, Albania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mediterranean University of Albania, Tirana, Albania","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.87140935,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"10","issue":null,"first_page":"7","last_page":"20"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.9990000128746033},{"id":"https://openalex.org/keywords/penetration-testing","display_name":"penetration testing","score":0.996999979019165},{"id":"https://openalex.org/keywords/owasp-top-10","display_name":"OWASP Top 10","score":0.9430000185966492},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.9459999799728394},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":1.0},{"id":"https://openalex.org/keywords/cross-site-request-forgery","display_name":"cross-site request forgery","score":1.0},{"id":"https://openalex.org/keywords/zero-day-vulnerabilities","display_name":"zero-day vulnerabilities","score":0.9369999766349792},{"id":"https://openalex.org/keywords/open-source-software-vulnerabilities","display_name":"open-source software vulnerabilities","score":0.8650000095367432},{"id":"https://openalex.org/keywords/vulnerability-reduction","display_name":"vulnerability reduction","score":0.6010000109672546},{"id":"https://openalex.org/keywords/secure-coding","display_name":"secure coding","score":0.7400000095367432},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"vulnerability management","score":0.5059999823570251}],"concepts":[{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.7222999930381775},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.6757000088691711},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6534000039100647},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6399999856948853},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.603600025177002},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.45399999618530273},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.4456999897956848},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.4242999851703644},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.40779998898506165},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.38749998807907104},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3822000026702881},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.37279999256134033},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3393999934196472},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3343000113964081},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.3319000005722046},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.2944999933242798},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2912999987602234},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2897000014781952},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.28619998693466187},{"id":"https://openalex.org/C80107235","wikidata":"https://www.wikidata.org/wiki/Q7162625","display_name":"Penetration (warfare)","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.27730000019073486},{"id":"https://openalex.org/C2778553114","wikidata":"https://www.wikidata.org/wiki/Q1035293","display_name":"Database security","level":2,"score":0.25450000166893005},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.2540999948978424},{"id":"https://openalex.org/C97200028","wikidata":"https://www.wikidata.org/wiki/Q1196135","display_name":"Web engineering","level":5,"score":0.2526000142097473}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.25019/zb7wnh69","doi":"https://doi.org/10.25019/zb7wnh69","is_oa":true,"landing_page_url":"https://doi.org/10.25019/zb7wnh69","pdf_url":"https://scrd.eu/index.php/scrd/article/download/894/969","source":{"id":"https://openalex.org/S4387293025","display_name":"Smart Cities and Regional Development (SCRD) Journal","issn_l":"2537-3803","issn":["2537-3803","2821-7888"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314610","host_organization_name":"National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha","host_organization_lineage":["https://openalex.org/P4310314610"],"host_organization_lineage_names":["National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities and Regional Development (SCRD) Journal","raw_type":"journal-article"},{"id":"pmh:oai:scrd.eu:article/894","doi":null,"is_oa":true,"landing_page_url":"https://scrd.eu/index.php/scrd/article/view/894","pdf_url":null,"source":{"id":"https://openalex.org/S4387293025","display_name":"Smart Cities and Regional Development (SCRD) Journal","issn_l":"2537-3803","issn":["2537-3803","2821-7888"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314610","host_organization_name":"National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha","host_organization_lineage":["https://openalex.org/P4310314610"],"host_organization_lineage_names":["National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.25019/e8dnyv03","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:72760e39a8bd413eabf02d38ace12406","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/72760e39a8bd413eabf02d38ace12406","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Smart Cities and Regional Development Journal, Vol 10 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.25019/zb7wnh69","doi":"https://doi.org/10.25019/zb7wnh69","is_oa":true,"landing_page_url":"https://doi.org/10.25019/zb7wnh69","pdf_url":"https://scrd.eu/index.php/scrd/article/download/894/969","source":{"id":"https://openalex.org/S4387293025","display_name":"Smart Cities and Regional Development (SCRD) Journal","issn_l":"2537-3803","issn":["2537-3803","2821-7888"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314610","host_organization_name":"National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha","host_organization_lineage":["https://openalex.org/P4310314610"],"host_organization_lineage_names":["National University of Political Studies and Public Administration (SNSPA), College of Communication and Public Relations, Bucha"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities and Regional Development (SCRD) Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7223652609.pdf","grobid_xml":"https://content.openalex.org/works/W7223652609.grobid-xml"},"referenced_works_count":5,"referenced_works":["https://openalex.org/W3109245263","https://openalex.org/W3191257699","https://openalex.org/W4382562195","https://openalex.org/W4404968174","https://openalex.org/W7143728159"],"related_works":["https://openalex.org/W7124317626","https://openalex.org/W4385770215","https://openalex.org/W2735835035","https://openalex.org/W2729788345","https://openalex.org/W7171651632","https://openalex.org/W2941274432","https://openalex.org/W4395673733","https://openalex.org/W7218119786","https://openalex.org/W2155853355","https://openalex.org/W7131847798"],"abstract_inverted_index":{"The":[0,30,69,90,112,129,182,212],"paper":[1,31,213,256],"considers":[2],"how":[3],"penetration":[4,48],"testing":[5,93,113,219,229],"can":[6],"be":[7],"conducted":[8,115],"in":[9,17,52,75],"a":[10,47,86],"structured":[11],"way":[12],"to":[13,21,66,175],"identify":[14],"critical":[15],"vulnerabilities":[16,143,224,264],"web":[18,79,88,222],"applications":[19],"and":[20,42,82,105,126,131,146,150,170,178,187,205,220,233,265],"enable":[22],"an":[23,215],"ongoing":[24],"security":[25,81,151,168,188,231],"improvement":[26,243],"process.":[27],"Literature":[28],"background:":[29],"is":[32,114,158,163,173],"built":[33],"on":[34,62,135],"the":[35,38,43,53,72,76,117,239,251,255,268,271,274],"basis":[36],"of":[37,45,55,78,85,92,109,119,144,199,208,241,244,262],"OWASP":[39],"Top":[40],"10":[41],"practices":[44],"conducting":[46],"test,":[49],"but":[50],"positioned":[51],"context":[54],"modern":[56],"SCRD":[57],"cybersecurity":[58],"research,":[59],"which":[60],"focuses":[61],"practical":[63,83],"risk-based":[64],"approaches":[65],"cybersecurity.":[67],"Approach:":[68],"methodology":[70],"includes":[71,94],"literature":[73],"review":[74],"sphere":[77],"application":[80,223],"assessment":[84,130,169],"certain":[87],"application.":[89],"procedure":[91],"such":[95,120],"steps":[96],"as":[97,122],"reconnaissance,":[98],"scanning,":[99],"verification,":[100],"exploitation,":[101],"impact":[102],"assessment,":[103],"reporting,":[104],"recommendations":[106,191],"for":[107,166,218,254],"mitigation":[108],"identified":[110,263],"problems.":[111],"with":[116,154,190,228],"use":[118],"tools":[121],"Burp":[123],"Suite,":[124],"Nmap":[125],"manually.":[127],"Results:":[128],"analytical":[132,216],"framework":[133,217],"concentrate":[134],"SQL":[136],"injection,":[137],"cross-site":[138,140],"scripting,":[139],"request":[141],"forgery,":[142],"plugins":[145],"components,":[147,200],"zero-day":[148],"vulnerabilities,":[149],"issues":[152],"associated":[153],"open-source":[155],"software.":[156],"It":[157,236],"found":[159],"that":[160],"automatic":[161],"scanning":[162],"not":[164,258],"enough":[165],"comprehensive":[167],"manual":[171],"verification":[172],"needed":[174],"assess":[176],"exploitability":[177],"possible":[179],"impact.":[180],"Implications:":[181],"findings":[183],"provide":[184],"organizations,":[185],"developers,":[186],"departments":[189],"about":[192,267],"secure":[193],"coding,":[194],"continuous":[195,242],"testing,":[196],"timely":[197],"updates":[198],"cryptographic":[201],"security,":[202,245],"training":[203],"employees":[204],"other":[206],"processes":[207],"managing":[209],"vulnerabilities.":[210],"Value:":[211],"provides":[214,273],"mitigating":[221],"by":[225],"associating":[226],"them":[227],"steps,":[230],"controls,":[232],"organizational":[234],"implications.":[235],"also":[237],"stresses":[238],"importance":[240],"rather":[246],"than":[247],"one-time":[248],"testing.":[249],"As":[250],"evidence":[252,276],"base":[253],"does":[257],"have":[259],"reproducible":[260],"numbers":[261],"information":[266],"target":[269],"architecture,":[270],"manuscript":[272],"qualitative":[275],"only.":[277]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-27T00:00:00"}