System and method to perform secure web application testing based on a hybrid pipelined approach

摘要

A processor implemented method of performing a security web application testing based on a hybrid pipelined application which includes (a) receiving, a scan profile selected from a group includes (i) an uniform resource locator associated with an application, (ii) one or more scan attack templates, (iii) one or more attack rules, and (iv) one or more automation scan results, (b) generating, a one or more possible tasks based on the scan profile, (c) selecting, at least a sub-set of tasks from the one or more possible tasks, (d) assigning, the sub-set of tasks to an automated task performing tool, and a user for execution, (e) obtaining, one or more tasks results associated with the sub-set of tasks executed by the automated task performing tool, and the user, and (f) updating, a database based on the one or more tasks results.

主权项

1. A processor implemented method of performing a security web application testing based on a hybrid pipelined application, said processor implemented method comprising:
(a) receiving, a scan profile selected from a group comprising of (i) an uniform resource locator associated with an application, (ii) one or more scan attack templates, (iii) one or more attack rules, and (iv) one or more automation scan results; (b) generating, a one or more possible tasks based on said scan profile, wherein said one or more possible tasks comprises (i) dependencies between said one or more possible tasks, and (ii) a cost and a reward values for performing said one or more possible tasks; (c) selecting, at least a sub-set of tasks from said one or more possible tasks based on one or more parameters selected from a group comprising (i) task goals, and (ii) one or more use cases; (d) assigning, said sub-set of tasks to an automated task performing tool, and a user for execution based on an availability said user and said automated task performing tool, a complexity of a task, a level of skill of said user, time to finish constraints, and said cost and reward values; (e) obtaining, one or more tasks results associated with said sub-set of tasks executed by said automated task performing tool, and said user; and (f) updating, a database based on said one or more tasks results.