Design of security strategy of selected (web) application

Imran Ihsan Butt, BS

Diplomová práce

Abstract:

In response to the growing prevalence of web applications, safeguarding sensitive data has become imperative, necessitating robust security measures. This thesis conducts a comprehensive analysis of vulnerabilities, ranging from low to high severity, employing the OWASP Top 10 and identifying other critical weaknesses. The primary objective is to formulate a thorough security strategy for a designated web application, aiming to enhance its security posture and mitigate the potential risk of data breaches. The research involves identifying vulnerabilities, implementing security controls, and creating a response plan to ensure the confidentiality, integrity, and availability of data stored and transmitted by the web application. Using a mixed-method approach, including literature review, architectural and code analysis, as well as stakeholder interviews and surveys, the study contributes to advancing web application security practices by developing an empirically grounded and principled security strategy. The proposed strategy seeks to establish an initiative-taking and resilient defense, preserving the web application's integrity and protecting sensitive data from unauthorized access.

Keywords

Web application security, Cybersecurity, Design strategy, Risk management, Information security, Threat modeling, Penetration testing, Vulnerability assessment, Authentication and Authorization, Security compliance, Access control, User authentication

Jazyk práce: angličtina

Datum vytvoření / odevzdání či podání práce: 1. 12. 2024

Obhajoba závěrečné práce

• Obhajoba proběhla 5. 2. 2025
• Vedoucí: Ing. Martin Havránek, Ph.D.
• Oponent: Ladislav Benda, externi

Česká zemědělská univerzita v Praze

Provozně ekonomická fakulta

Magisterský studijní program:
Informatics