Elim Chung

City University of Hong Kong, Accountancy, Department Member

Followers

Following

Public Views

IJOART

Yarmouk University

Universiti Teknologi Malaysia - UTM

Hương Trần Kim

SDIWC Organization

Jeffrey Asonganyi

Interests

Uploads

Papers by Elim Chung

A testing framework for Web application security assessment

Computer Networks, 2005

The rapid development phases and extremely short turnaround time of Web applications make it diff... more The rapid development phases and extremely short turnaround time of Web applications make it difficult to eliminate their vulnerabilities. Here we study how software testing techniques such as fault injection and runtime monitoring can be applied to Web applications. We implemented our proposed mechanisms in the Web Application Vulnerability and Error Scanner (WAVES)-a black-box testing framework for automated Web application security assessment. Real-world situations are used to test WAVES and to compare it with other tools. Our results show that WAVES is a feasible platform for assessing Web application security.