A Design and Development of Web Application Vulnerability Detection Using Graph-Based Modeling Analysis Over CAPEC

This paper presents a new approach to web application vulnerability detection by integrating the Common Attack Pattern Enumeration and Classification (CAPEC) framework with our proposed graph analysis techniques. The proposed model aims at detecting the vulnerabilities of multiple web applications based on the examination of their attack patterns found in web server logs. We introduced a graph-based detection model to identify and classify attack patterns. This approach enhances the efficiency of the vulnerability discovery as well as improves the insightful analysis of the correlation between vulnerabilities and attack patterns. To demonstrate the functionality and efficiency of the proposed technique, we conducted the experiments to show how the system detects the vulnerabilities from the generated log data and provided the processing time of the system when it deals with multiple log files and attack patterns. The experimental results highlight the potential of our proposed system to advance web application security in the face of evolving cyber threats.