Tools, Languages, Methodologies for Representing Semantics on the Web of Things

5Dynamic Security Testing Techniques for the Semantic Web of Things: Market and Industry Perspective

As businesses are moving toward digitalization, their essential operation on Web Applications is also increased. The complexity and the size of Web Applications are growing, and so is the concern of Web Application Security. The dynamic nature of Web Applications calls for a dynamic and robust testing methodology, a Dynamic Web Application testing, which tests the dynamic nature of the Web App and discovers vulnerabilities in run time or a dynamic state of Web Application. But as Web Applications grow faster, there is a need for dynamic testing to grow simultaneously. This chapter presents insights into methodologies and techniques that various researchers devise. These techniques include the use of static analysis with dynamic testing to increase the coverage of dynamic analysis, use of Tainted Mode Model to surplus the dynamic testing, and use of user session data to generate test cases that are effective in finding vulnerabilities in Web Application at run time by using dynamic testing. We have also presented a roadmap for research directions.

5.1. Introduction

Dynamic Application Security Testing (DAST) is defined as a type of Black Box testing, where the tester has no access to the internal working of the Web Application, and the tester tries to test the working of a Web Application by targeting scripts or actual attacks on the Web Application to find out about the existence ...