View in EDS

Metodologia Mista para Implantar Aplicações Web Seguras: combinando ferramentas tradicionais e de IA.

Saved in:
Bibliographic Details
Title: Metodologia Mista para Implantar Aplicações Web Seguras: combinando ferramentas tradicionais e de IA. (Portuguese)
Alternate Title: Mixed Methodology to Deploy Web Secure Applications: combining traditional and IA tools. (English)
Authors: Barreto José, Jouson, Merkle Westphall, Carla
Source: CISTI (Iberian Conference on Information Systems & Technologies / Conferência Ibérica de Sistemas e Tecnologias de Informação) Proceedings; 2025, Issue 20, p214-220, 7p
Abstract (English): Secure deployment of web applications is a critical issue due to the exponential increase in cyber threats. The increasing complexity of security requires the integration of automated tools and innovative approaches such as artificial intelligence to address vulnerabilities. There is insufficient effort to create methodologies that combine these tools. In this paper, we propose a mixed methodology for secure deployment of web applications named M-MDWSA (Mixed Methodology to Deploy Web Secure Applications), which uses metrics such as accuracy and detection rate to measure deployment performance. Both automated scanning tools and AI-based vulnerable code detection tools are effective in identifying vulnerabilities. Values above 90% for detection rate and above 80% for accuracy were obtained. At the end of the study, it is concluded that continuous training for administrators and developers is essential to address vulnerabilities and improve code quality. [ABSTRACT FROM AUTHOR]
Abstract (Portuguese): A implantação segura de aplicativos web é um tópico crítico devido ao aumento exponencial de ameaças cibernéticas. A crescente complexidade da segurança requer a integração de ferramentas automatizadas e abordagens inovadoras, como inteligência artificial, para lidar com vulnerabilidades. Não há esforços suficientes para criar metodologias que combinem essas ferramentas. Neste artigo, propomos uma metodologia mista para a implantação segura de aplicativos web chamada M-MDWSA (Mixed Methodology to Deploy Web Secure Applications), que usa métricas como precisão e taxa de detecção para medir o desempenho da implantação. Tanto as ferramentas de varredura automática quanto as ferramentas de detecção de código vulnerável baseadas em IA (inteligência artificial) são eficazes na identificação de vulnerabilidades. Foram obtidos valores acima de 90% na taxa de detecção e acima de 80% para precisão. Ao final do estudo, conclui-se que o treinamento contínuo para administradores e desenvolvedores é essencial para lidar com vulnerabilidades e melhorar a qualidade do código. [ABSTRACT FROM AUTHOR]
Copyright of CISTI (Iberian Conference on Information Systems & Technologies / Conferência Ibérica de Sistemas e Tecnologias de Informação) Proceedings is the property of Conferencia Iberica de Sistemas Tecnologia de Informacao and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Complementary Index
Description
Abstract:Secure deployment of web applications is a critical issue due to the exponential increase in cyber threats. The increasing complexity of security requires the integration of automated tools and innovative approaches such as artificial intelligence to address vulnerabilities. There is insufficient effort to create methodologies that combine these tools. In this paper, we propose a mixed methodology for secure deployment of web applications named M-MDWSA (Mixed Methodology to Deploy Web Secure Applications), which uses metrics such as accuracy and detection rate to measure deployment performance. Both automated scanning tools and AI-based vulnerable code detection tools are effective in identifying vulnerabilities. Values above 90% for detection rate and above 80% for accuracy were obtained. At the end of the study, it is concluded that continuous training for administrators and developers is essential to address vulnerabilities and improve code quality. [ABSTRACT FROM AUTHOR]
ISSN:21660727