ANÁLISIS DE LAS HERRAMIENTAS Y TÉCNICAS UTILIZADAS EN PRUEBA DE PENETRACIÓN PARA LA DETECCIÓN DE VULNERABILIDADES EN APLICACIONES WEB

DETECCIÓN DE VULNERABILIDADES EN APLICACIONES WEB

Abstract

In view of the risks of cyber attack that occurs in computer systems, especially in web applications, which handles a large amount of information and private data such as, for example, commercial advertising, tourist web pages, digital marketing, I enter Others, a way to prevent it, is to act early, detecting potential vulnerabilities in time, which can be exploited by attackers or hackers who lack ethical considerations. The different tools and techniques used in penetration testing to detect vulnerabilities in web applications are analyzed, in order to detect possible threats that affect the correct functioning of the different computer systems. The applied methodology was the bibliographic one, which allowed to collect relevant information to carry out the research and the analytical-synthetic method that was used to extract the main characteristics and compare the techniques and tools for the detection of vulnerabilities in web applications, in addition an analysis was carried out comparative to determine which tool was the most used in cyber attacks. It was determined that there are many tools and techniques that provide vulnerability detection in web applications, among the most used by computer users, there is the Qualys Guard Web Application Scanning WAS. This analysis made it possible to determine the effectiveness of the tools and techniques when applied in vulnerability testing, considering the analysis presented by different authors, including the traceability matrix, detailed information on the security findings detected, which served to establish the different types cyber attacks, which occur on web pages.

KEY WORDS: vulnerability analysis; penetration test; Informatic security