Data Clustering and Categorization for Processing Results from Penetration Testing

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F26%3A0193515" target="_blank" >RIV/00216305:26220/26:0193515 - isvavai.cz</a>
Result on the web
<a href="https://ieeexplore.ieee.org/abstract/document/11048825" target="_blank" >https://ieeexplore.ieee.org/abstract/document/11048825</a>
DOI - Digital Object Identifier
—

Result language
angličtina
Original language name
Data Clustering and Categorization for Processing Results from Penetration Testing
Original language description
As cyber threats and their potential impacts increase, the need for testing cyber resilience has become more important. Web applications are one of the frequent targets of cyberattacks, and therefore, the need for their penetration testing is desirable. However, these applications can contain up to tens of thousands of web resources, making the testing process very difficult. Our paper focuses on categorizing similar web resources from the reconnaissance phase to increase the overall effectiveness of penetration testing. For this purpose, we designed and developed a system for clustering and categorizing web resources using cluster analysis. We experimentally tested our solution in two iterations on 10,000 and 50,000 resources. The results show that e-commerce and newspaper websites contain a large amount of similar content, which our system was able to detect and provide penetration testers with the filtered sources for the next phase of penetration testing.
Czech name
—
Czech description
—

Project
<a href="/en/project/VK01030019" target="_blank" >VK01030019: Interactive checklists for effective cybersecurity testing</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)<br>S - Specificky vyzkum na vysokych skolach

Publication year
2024
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
ICUMT 2024; 16th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops
ISBN
978-3-8007-6544-7
ISSN
—
e-ISSN
—
Number of pages
6
Pages from-to
131-136
Publisher name
VDE
Place of publication
Meloneras, Gran Canaria, Spain
Event location
Meloneras, Gran Canaria, Spain
Event date
Nov 26, 2024
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—

Similar results(10)