The evolution from Traditional to Intelligent Web Security: Systematic Literature Review

Information security is fundamental in the area of computing science with new metrics and technologies developed to secure the private data of entities and individuals related to banking, defense, education, business, medical, among others. The web servers require a high-security level to guarantee data protection and transactions to store, to manage, and to allow the interaction between the user or users and the website. The number of cybercriminals is increasing, looking for vulnerable web servers or applications to obtain the necessary information, modify it, or sell it to the highest bidder. There are multiple solutions created over the years; however, the technological advance is not only to secure the data, but the cybercriminals are also updated and use sophisticated techniques; therefore, these solutions are also obsolete if there is no update. The purpose of this document is to present a systematic review of the literature on web security. Identified Studies try to mitigate various attacks or detect vulnerabilities, the solutions proposed so far are not sufficient, and most attacks occur at the application layer level. The advances in this field are dizzying, where some studies, although very small, that already use automatic learning techniques or Cognitive Security is present in this area.