Vulnerability Assessment in Heterogeneous Web Environment Using Probabilistic Arithmetic Automata

• Main Authors: A. Moshika, M. Thirumaran, Balaji Natarajan, K. Andal, G. Sambasivam, Rajesh Manoharan
• Format: Article
• Language: English
• Published: IEEE 2021-01-01
• Series: IEEE Access
• Subjects: Security analytics; Deterministic Arithmetic Automata (DAA); probabilistic arithmetic automata (PAA); heterogeneous web application
• Online Access: https://ieeexplore.ieee.org/document/9433582/

In the current scenario most of the business enterprises are running through web applications. But the major drawback is that they fail to provide a secure environment. To overcome this security issue in web applications, there are many vulnerability detection tools are available at present. But these tools are not proactive and consistent as it does not adapt to all kinds of recent updates and is unable to track new emerging vulnerabilities. For the long-term functioning of a business enterprise, statistical data with efficient analytics on vulnerabilities is required to enhance its security impacts. Predictive Analytics is a powerful solution to effectively arm the recent incident response to modern-day threats. Predictive Analytics provides a proactive and decision-making approach and insights into how well security programs are working. It can also help to identify problem areas and can warn about imminent or active attacks in heterogeneous web applications to enhance the former features and analyze the origin and pattern of the attack in a more effective manner. The pattern analyzed through research is given as an input to the Machine Learning techniques such as Deterministic Arithmetic Automata (DAA), Probabilistic Arithmetic Automata (PAA) to predict the probabilistic value as an output. From the obtained probabilistic values, we can detect the cause of an attack, prevent the heterogeneous web application of business enterprises from further impacts and find the penetration level of an attack from web application to web service.