Exportar Publicação

Vieira, T. & Serrão, C. (2016). Web security in the finance sector: Analysing the security of financial web applications: A case study. In 2016 11th International Conference for Internet Technology and Secured Transactions (ICITST). (pp. 255-259). Barcelona, Spain: IEEE.

T. Vieira and C. J. Serrão,  "Web security in the finance sector: Analysing the security of financial web applications: A case study", in 2016 11th Int. Conf. for Internet Technology and Secured Transactions (ICITST), Barcelona, Spain, IEEE, 2016, pp. 255-259

@inproceedings{vieira2016_1775764793381,
	author = "Vieira, T. and Serrão, C.",
	title = "Web security in the finance sector: Analysing the security of financial web applications: A case study",
	booktitle = "2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)",
	year = "2016",
	editor = "",
	volume = "",
	number = "",
	series = "",
	doi = "10.1109/ICITST.2016.7856707",
	pages = "255-259",
	publisher = "IEEE",
	address = "Barcelona, Spain",
	organization = "IEEE",
	url = "https://ieeexplore.ieee.org/xpl/conhome/7847254/proceeding"
}

TY  - CPAPER
TI  - Web security in the finance sector: Analysing the security of financial web applications: A case study
T2  - 2016 11th International Conference for Internet Technology and Secured Transactions (ICITST)
AU  - Vieira, T.
AU  - Serrão, C.
PY  - 2016
SP  - 255-259
DO  - 10.1109/ICITST.2016.7856707
CY  - Barcelona, Spain
UR  - https://ieeexplore.ieee.org/xpl/conhome/7847254/proceeding
AB  - Nowadays, information security is an increasing concern in institutions and organizations. This concern is even greater in the finance sector, not only because the financial amount involved but also clients and organization’s private and sensitive information. As a way to test security in infrastructures, networks, deployed web applications and many other assets, organizations have been performing penetration testing (pentest) which simulates an attacker’s behavior in a controlled environment in order to identify its vulnerabilities. This article focusses on the analysis of the results of security audits conducted on several financial web applications from one institution with aid of automatic tools in order to assess their web applications security level. To help in security matters, many organizations build security frameworks for vulnerability assessment, security assessment, threat modeling, penetration testing, risk management and many more. As for penetration testing, organizations such as OWASP provide vulnerability and security information, a testing methodology, risk analysis and penetration testing tools.
ER  -