{"id":"https://openalex.org/W7133193381","doi":"https://doi.org/10.1109/sds68531.2025.11409835","title":"An Automated Scanner for Detecting Common Web Application Vulnerabilities with a Focus on Enhanced Performance and Security.","display_name":"An Automated Scanner for Detecting Common Web Application Vulnerabilities with a Focus on Enhanced Performance and Security.","publication_year":2025,"publication_date":"2025-12-02","ids":{"openalex":"https://openalex.org/W7133193381","doi":"https://doi.org/10.1109/sds68531.2025.11409835"},"language":"en","primary_location":{"id":"doi:10.1109/sds68531.2025.11409835","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sds68531.2025.11409835","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Software Defined Systems (SDS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127821460","display_name":"Anthonia Osarumwense Taiwo","orcid":null},"institutions":[{"id":"https://openalex.org/I198012923","display_name":"University of Staffordshire","ror":"https://ror.org/00d6k8y35","country_code":"GB","type":"education","lineage":["https://openalex.org/I198012923"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Anthonia Osarumwense Taiwo","raw_affiliation_strings":["University of Staffordshire,School of Computing and Digital Technology,Stoke-on-Tren,United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Staffordshire,School of Computing and Digital Technology,Stoke-on-Tren,United Kingdom","institution_ids":["https://openalex.org/I198012923"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061099244","display_name":"Pantaleon Lutta","orcid":"https://orcid.org/0000-0002-6358-8388"},"institutions":[{"id":"https://openalex.org/I198012923","display_name":"University of Staffordshire","ror":"https://ror.org/00d6k8y35","country_code":"GB","type":"education","lineage":["https://openalex.org/I198012923"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Pantaleon Lutta","raw_affiliation_strings":["University of Staffordshire,School of Computing and Digital Technology,Stoke-on-Tren,United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Staffordshire,School of Computing and Digital Technology,Stoke-on-Tren,United Kingdom","institution_ids":["https://openalex.org/I198012923"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I198012923"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.69067823,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"136","last_page":"145"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9706000089645386,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9706000089645386,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.00839999970048666,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.6359000205993652},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.631600022315979},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.5763999819755554},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5473999977111816},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.515500009059906},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.49799999594688416},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.45649999380111694},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.42910000681877136},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.424699991941452}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7541999816894531},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.6359000205993652},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.631600022315979},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5763999819755554},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5473999977111816},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.515500009059906},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.49799999594688416},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45829999446868896},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.42910000681877136},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.424699991941452},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.37790000438690186},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.36550000309944153},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.36169999837875366},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.3434000015258789},{"id":"https://openalex.org/C107683887","wikidata":"https://www.wikidata.org/wiki/Q782466","display_name":"Integration testing","level":3,"score":0.3314000070095062},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.328900009393692},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.3197999894618988},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.31850001215934753},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.31369999051094055},{"id":"https://openalex.org/C2779751349","wikidata":"https://www.wikidata.org/wiki/Q1474480","display_name":"Scanner","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2793000042438507},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.27900001406669617},{"id":"https://openalex.org/C510870499","wikidata":"https://www.wikidata.org/wiki/Q47607","display_name":"SQL","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.26759999990463257},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.25679999589920044},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sds68531.2025.11409835","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sds68531.2025.11409835","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 12th International Conference on Software Defined Systems (SDS)","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.staffs.ac.uk:9629","is_oa":false,"landing_page_url":"https://eprints.staffs.ac.uk/9629/1/Tonia%20manuscript%20final%20reviewed.docx","pdf_url":null,"source":{"id":"https://openalex.org/S4306401113","display_name":"Staffordshire Online Repository (Staffordshire University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I198012923","host_organization_name":"University of Staffordshire","host_organization_lineage":["https://openalex.org/I198012923"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Book Chapter, Section or Conference Proceeding"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1979931683","https://openalex.org/W2998068334","https://openalex.org/W3039344911","https://openalex.org/W3196760563","https://openalex.org/W3203610772","https://openalex.org/W4200253176","https://openalex.org/W4210664862","https://openalex.org/W4214537779","https://openalex.org/W4220751473","https://openalex.org/W4312436517","https://openalex.org/W4380682042","https://openalex.org/W4392254992"],"related_works":[],"abstract_inverted_index":{"Web":[0,125],"applications":[1],"are":[2,25,33,62],"essential":[3],"to":[4,11,158,222],"the":[5,123,148,193],"digital":[6],"world":[7],"but":[8],"remain":[9],"susceptible":[10],"common":[12],"threats":[13],"like":[14,208],"SQL":[15,173],"Injection":[16,174],"(SQLi)":[17],"and":[18,36,100,114,118,169,211],"Cross-Site":[19],"Scripting":[20],"(XSS).":[21],"Automated":[22],"vulnerability":[23,87,175],"scanners":[24,61],"vital":[26],"for":[27,42,47,73,103,203],"security,":[28],"yet":[29],"many":[30],"current":[31],"solutions":[32],"too":[34],"slow":[35],"resource-intensive.":[37],"This":[38,55,182],"makes":[39],"them":[40],"impractical":[41],"rapid":[43],"development":[44],"cycles":[45],"or":[46],"integration":[48],"into":[49],"modern":[50],"Software-Defined":[51],"Security":[52,127],"(SDS)":[53],"systems.":[54],"paper":[56],"proposes":[57],"that":[58,185],"focused,":[59,93],"lightweight":[60,188],"wellsuited":[63],"as":[64],"specialized":[65],"modules":[66],"within":[67],"SDS,":[68],"offering":[69],"quick,":[70],"targeted":[71],"feedback":[72],"immediate":[74],"security":[75],"policy":[76],"enforcement.":[77],"To":[78],"demonstrate":[79],"this,":[80],"we":[81],"developed":[82],"a":[83,92,137,144,177,186,200],"lightweight,":[84],"Pythonbased":[85],"automated":[86,197],"scanner.":[88],"Its":[89],"design":[90],"emphasizes":[91],"modular":[94],"architecture,":[95],"using":[96],"Python\u2019s":[97],"efficient":[98],"processing":[99],"minimal":[101],"libraries":[102],"enhanced":[104],"performance.":[105],"We":[106],"quantitatively":[107],"assessed":[108],"its":[109,220,229],"effectiveness,":[110],"benchmarking":[111],"detection":[112],"speed":[113],"accuracy":[115],"(true":[116],"positive":[117,120,180],"false":[119,179],"rates)":[121],"against":[122],"Open":[124],"Application":[126],"Project":[128],"Zed":[129],"Attack":[130,134],"Proxy":[131,135],"(OWASP":[132],"Zed)":[133],"on":[136],"standard":[138],"vulnerable":[139],"test":[140],"site.":[141],"Results":[142],"show":[143],"significant":[145],"performance":[146,194,230],"improvement:":[147],"scanner":[149],"reduced":[150],"average":[151],"scan":[152],"time":[153],"from":[154],"about":[155],"55":[156],"minutes":[157],"just":[159],"58.7":[160],"seconds.":[161],"In":[162],"terms":[163],"of":[164],"accuracy,":[165],"it":[166],"successfully":[167],"identified":[168],"confirmed":[170],"an":[171],"exploitable":[172],"with":[176],"low":[178],"rate.":[181],"research":[183],"confirms":[184],"targeted,":[187],"approach":[189],"can":[190],"effectively":[191],"close":[192],"gap":[195],"in":[196],"scanning,":[198],"providing":[199],"practical":[201],"solution":[202],"environments":[204],"needing":[205],"fast":[206],"feedback,":[207],"Continuous":[209,212],"Integration":[210],"Delivery":[213],"(CI/CD)":[214],"pipelines.":[215],"Future":[216],"work":[217],"will":[218],"expand":[219],"coverage":[221],"include":[223],"more":[224],"complex":[225],"vulnerabilities":[226],"while":[227],"retaining":[228],"benefits.":[231]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-03-03T00:00:00"}