[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-572236-105":53,"doc-detail-572236-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","web-application-security-doi-1046932sfjdv3n4-002","Web Application Security - DOI 10.46932/sfjdv3n4-002","","This study examines how security flaws in web applications threaten information security and why web-application security is a critical branch of information security. It reviews the most common and serious web vulnerabilities and their solutions, with emphasis on preventing security problems across the full development life cycle. The work identifies best practices for pre-, during-, and postdevelopment phases, and the security tools that support developers. A security checklist for developers is proposed and maintained as threats and technologies evolve.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/web-application-security-doi-1046932sfjdv3n4-002/572236/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/web-application-security-doi-1046932sfjdv3n4-002/572236.png","ImageObject",442,249,{"name":88,"@type":89},"Kurz","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":47},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the main focus of the study?","Question",{"text":108,"@type":109},"The study focuses on web application security by analyzing how security flaws threaten information security and how developers can prevent problems across the development life cycle.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"Which parts of the development process are addressed?",{"text":113,"@type":109},"It considers best practices for the before/during development and postdevelopment phases, guiding developers on actions across the entire life cycle.",{"name":115,"@type":106,"acceptedAnswer":116},"What prevents security issues according to the study?",{"text":117,"@type":109},"Following security standards and development cycles that include security concerns helps prevent most potential problems, supported by a security checklist for developers.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},572236,1792117553,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":47,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":79},2336478945635,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","Web application security  \nDOI: 10.46932/sfjdv3n4-002  \nReceived in: April 14th, 2022  \nAccepted in: June 30th, 2022  \nBuket Erşahin  \nDoctor of Computer Engineering  \nInstitution: Izmir Institute of Technology  \nAddress: Izmir, Turkey  \n[E-mail: buketoksuzoglu@iyte.edu.tr](E-mail: buketoksuzoglu@iyte.edu.tr)  \nMustafa Erşahin  \nDoctor of Computer Engineering  \nInstitution: Commencis Technology  \nAddress: Izmir, Turkey  \n[E-mail: mustafa.ersahin@commencis.com.tr](E-mail: mustafa.ersahin@commencis.com.tr)  \nABSTRACT  \nThis study aims to show how security flaws of web applications can threat information security. Web Application Security is a branch of Information Security which focuses on web application level security flaws and their solutions. Evolution of Web continues with a big momentum. Amount of information shared over Web increases every day, various business domains continue to integrate their operations to digital world. This brings its own risks and makes Information Security of Web Applications more important than ever. Most common and serious Web vulnerabilities have been analyzed along with their solutions. This study focuses on how web developers can already prevent security problems during the development life cycle. What are the best practices to follow before/during the development and postdevelopment phases? Which security tools can be used to support developers? Building totally secure web applications is not an easy job. Following security standards and development cycles with security concerns can already prevent most of the potential problems. A security checklist for web developers came out at the end of the study. Evolving web technologies and new security threats force us to keep this checklist up to date. We are working on a mechanism which will keep this checklist up to date.  \nKeywords: web application, security, development, checklist, security knowledge framework.  \n1 INTRODUCTION  \nIt has been long time that web applications became much more than web sites with static content. Evolution of the World Wide Web created web applications with greater abilities and still continues to provide brand new solutions to all kind of market needs.  \nWeb applications are the most used technology for information and service delivery over Internet. Organizations from various different domains continue to move their operations to the digital world. Mobile and Web based technologies come at the top of the list. These digital services can be security critical and may contain sensitive information (e.g., financial, health) . Fast growing and evolving web environment brings up its own risks. Guaranteeing security for vast amount of information is not an easy  \ntask and not totally achievable. On the other hand, security breaches may result in loss of enormous amount of information and money along with ethical and legal consequences [1] .  \nFigure 1: Security Breach Trends of 2012 – 2016 [2]  \nAccording to Data Breach Trends 2016 report of RiskBased Security, 4,281 millions of records have been exposed in 2016, while it was only 822 millions in 2015 [2] . Even though the number of reported incidents has decreased in 2016, consequences of the incidents became much more worse. We see that there is not any correlation between the number of incidents and their results. This fact reminds us that one simple security breach may have serious consequences. Security standards must be followed completely without ignoring any potential threat to minimize all kind of risks.  \nFigure 2: Security Breach Trends of 2016 by Industry [2]  \nBusiness industry was the first target of attackers, followed by medical and government establishments [2] .  \nSources of these incidents may vary but this study will focus only on web application threats and their precautions. Study will try to look from developers’ point of view and examine their role on developing secure applications.  \n2 STATE OF WEB APPLICATIONS  \nWeb application attacks represent","cbCaivScjCaLt5Fe","https://ap.wps.com/l/cbCaivScjCaLt5Fe","pdf",377711,10,"English","# Introduction\n# State of Web Applications","[{\"question\":\"What is the main focus of the study?\",\"answer\":\"The study focuses on web application security by analyzing how security flaws threaten information security and how developers can prevent problems across the development life cycle.\"},{\"question\":\"Which parts of the development process are addressed?\",\"answer\":\"It considers best practices for the before/during development and postdevelopment phases, guiding developers on actions across the entire life cycle.\"},{\"question\":\"What prevents security issues according to the study?\",\"answer\":\"Following security standards and development cycles that include security concerns helps prevent most potential problems, supported by a security checklist for developers.\"}]","Web Application Security - DOI 10.46932/sfjdv3n4-002 | PDF",1791926292]