Defender-Attacker Model Based Secure Software Development Lifecycle for Common Web Vulnerabilities

2023

Closed access Metadata (CSL-JSON)
DOI 10.1109/sist58284.2023.10223516
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

In this paper, we propose a novel secure software development life cycle (SSDLC) algorithm for web applications by observing and demonstrating the 3 most popular web vulnerabilities from both the attacker's and defender's roles. This algorithm is based on the defender-attacker model and aims to provide confidentiality in data.