Web Application Penetration Testing Through Rule-Based Inference on Knowledge Graphs

Organizations are always at risk of security breaches caused by web vulnerabilities. In order to address this issue, security experts perform web application penetration testing as a proactive measure to identify vulnerabilities before they can be exploited. These experts have established methodologies that provide valuable insights for carrying out thorough assessments. This work aims to propose a knowledge base that models well-founded web application penetration testing methodologies. By combining the expertise of security professionals with knowledge graphs and logical inference models, it is possible to successfully replicate these methodologies in a manner that holds great promise for enhancing the effectiveness of security assessments.