AIRCC's International Journal of Computer Science and Information Technology

C. Sireesha ¹, G. Jyostna ¹, P. Raghu Varan ¹, P. R. L. Eswari ¹

Affiliations
1 Centre for Development of Advanced Computing, Hyderabad, IN

Abstract

PHP is one of the most commonly used languages to develop web sites because of its simplicity, easy to learn and it can be easily embedded with any of the databases. A web developer with his basic knowledge developing an application without practising secure guidelines, improper validation of user inputs leads to various source code vulnerabilities. Logical flaws while designing, implementing and hosting the web application causes work flow deviation attacks. In this paper, we are analyzing the complete behaviour of a web application through static and dynamic analysis methodologies.

Keywords

Authentication and Authorization Bypass, Cross-Site Scripting, Session Hijacking, Code Injection, Command Injection.

Full Text

   

Himanshu Pareek ¹, P. R. L. Eswari ¹, Sarat Chandra Babu ²

Affiliations
1 Center for Development of Advanced Computing, Hyderabad, IN
2 Center for Development of Advanced Computing, Bangalore, IN

Abstract

Number and complicacy of malware attack has increased multiple folds in recent times. Informed Internet users generally keep their computer protected but get confused when it comes to execute the untrusted applications. In such cases users may fall prey to malicious applications. There are malware behavior analyzers available but leave report analysis to the user. Common users are not trained to understand and analyze these reports, and generally expect direct recommendation whether to execute this application on their computer. This research paper tries to analyze behavior and help the common users and analysts to quickly classify an application as safe or malicious.

Keywords

Application Analysis, Trojan, Automated Malware Analysis.

Full Text