Abstract:
Nowadays, any kinds of cyber-attacks are
firstly attacked to web site and the site contains
information about business, government and
other organizations. So, the role of web page
security is becoming the essential part of cyber
security. Most of the web pages are suffered from
attacks such as Advanced Persistent Threat
(APT). An APT is an extended campaign
targeted at a specific organization to achieve a
clear objective. Most of the web pages have
much vulnerability due to insecure source codes.
In this paper, it will be defined web page
vulnerabilities on PHP source code. It will be
collected the attacks from the scenarios. The
result can be concluded the attack vectors via the
source code. Each level of source code can be
generated by the attributes of source code. These
attributes can be measured in order to secure
source codes and can be evaluated by measuring
the vulnerabilities metrics.