Defensive Analysis on Web-Application Input Validation for Advanced Persistent Threat (APT) Attack `

Abstract

Nowadays, any kinds of cyber-attacks are firstly attacked to web site and the site contains information about business, government and other organizations. So, the role of web page security is becoming the essential part of cyber security. Most of the web pages are suffered from attacks such as Advanced Persistent Threat (APT). An APT is an extended campaign targeted at a specific organization to achieve a clear objective. Most of the web pages have much vulnerability due to insecure source codes. In this paper, it will be defined web page vulnerabilities on PHP source code. It will be collected the attacks from the scenarios. The result can be concluded the attack vectors via the source code. Each level of source code can be generated by the attributes of source code. These attributes can be measured in order to secure source codes and can be evaluated by measuring the vulnerabilities metrics.