Design of security strategy of selected (web) application

Imran Ihsan Butt, BS

Master's thesis

Abstract:

In response to the growing prevalence of web applications, safeguarding sensitive data has become imperative, necessitating robust security measures. This thesis conducts a comprehensive analysis of vulnerabilities, ranging from low to high severity, employing the OWASP Top 10 and identifying other critical weaknesses. The primary objective is to formulate a thorough security strategy for a designated web application, aiming to enhance its security posture and mitigate the potential risk of data breaches. The research involves identifying vulnerabilities, implementing security controls, and creating a response plan to ensure the confidentiality, integrity, and availability of data stored and transmitted by the web application. Using a mixed-method approach, including literature review, architectural and code analysis, as well as stakeholder interviews and surveys, the study contributes to advancing web application security practices by developing an empirically grounded and principled security strategy. The proposed strategy seeks to establish an initiative-taking and resilient defense, preserving the web application's integrity and protecting sensitive data from unauthorized access.

Keywords

Web application security, Cybersecurity, Design strategy, Risk management, Information security, Threat modeling, Penetration testing, Vulnerability assessment, Authentication and Authorization, Security compliance, Access control, User authentication

Language used: English

Date on which the thesis was submitted / produced: 3. 4. 2024

Thesis defence

• Supervisor: Ing. Martin Havránek, Ph.D.
• Reader: Ladislav Benda, externi

Czech University of Life Sciences Prague

Faculty of Economics and Management

Master programme:
Informatics