Development of an information system for the quantitative assessment of web application security based on the OWASP ASVS standard

Oleksandr Revniuk; Nataliya Zagorodna; Ruslan Kozak; Bohdan Yavorskyy

doi:10.33108/visnyk_tntu2025.02.056

January 1, 2025Scientific journal of the Ternopil national technical university

Development of an information system for the quantitative assessment of web application security based on the OWASP ASVS standard

View Full Paper

Ask AI

Bookmark

Share

Key Points

The security assessment system calculates a quantitative score for web applications based on OWASP ASVS requirements, improving evaluation accuracy.
Multiple expert judgments are aggregated through a fuzzy logic subsystem to minimize subjectivity in security assessments.
A modular architecture supports personalized workflows and visualizes results, enhancing usability for information security audits.
The methodology adapts to various application architectures, highlighting the versatility of the assessment process across different domains.],
simple_explanation is designed to help ensure that web applications are secure against threats. It calculates security scores based on the OWASP ASVS, which is a widely recognized standard. Using insights from experts, this system uses a special method to gather and analyze data, resulting in a clearer understanding of application security. That means businesses can better protect their apps from cyber risks. 🔒 } } } } } } }
simple_explanation {'
}
{ “ : ” } ,
}
}
}
}
} } } } } } } } } } } } } } } } } } } } } } } } } } } } }
} } } } } } } } } } } } } } } } } } } } } } } } } } } }
} } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } { ” : ” } } } } } } } } } .
} }} } } }} } } }} } }} } } } } }} } }} } } }} } } } } } } } } } } } } } } } } } }
} } }
{ “ : ” } ,
}
}
} } } } } } } } } } } } } } } } } } } } } } } } } } } } } } }
{ “ : ” } ,
}
}
} } } } } } }
{ “ : ” } ,
}
}
} } } } } } }
{ “ : ” } ,
}
}
} } } } } } }
{ “ : ” } ,
}
}
} } } } } } }
{ “ : ” } ,
}
}
}, { “ : ” } } } } } } } } } } } } } } } }
} } } } } } }{ “ : ” } } } } } } } } } } } } } } }} } } } } } } } } }} } } } } } } } } }} } } }} } } }} } } } } } }} } } }} } }}, { “ : ” } } } } } }} } } { “ : ” } } } } } } } } } } } } } } } } } } } } } } } } } }} }}, { “ : ” } }} } } } } } } } } } } } } } } } } } } } } } } } } }}, { “ : ” } }} } } } } } } } } } } } } } } } } } } } } } } } } }}, { “ : ” } }} } } } } } } } } } } } } }} } } } } }} } } } } }}, { “ : ” } }} } } }}, { “ : ” } }} } } } }} } } }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} } }}</ } }
}} }}, { “ : ” }}, { “ : ” } }} } } }} } }} {
} }} }, { “ : ” }} } }} }} } }} } } }} }} }} } }} } }} }} } } } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} } }} } }} } }} } }} } }} } }} } }} } }} } }} } }} } }} }} } }} } }} }} } }} } }} }} } }} } }} } }} } }} } }} } }} } } } }} }} } }} }} } }} } }} }} } }} }} }} } }} }} }} } }} }} } }} }} }} } }} }} }} } }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} } }} } }} }} }} } }} }} } }} } }} } }} } }} }} }} } }}} }} } }} } }} } } } }} } }} } }} } }} } }} }} }} }} } }} } }} }} }} }} }} }} }} }} } }} }} }} }} }} }} }} }} } } } }} }} }} }} }} }} }} }} }} }} } }} }} }} }} }} }} }} }} } }} }} } }} }} }} }}}} }} }} }} }} }} }} ))} }} }} }} }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} } }} }} }} }} } }} }} }} }}}} }} } }} }} }} }} }} }} } }} }} }} } }} }} }}} }} }} } }} }} }} }} }} }} }} }} }} }} }} }}} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }}}} } }} {{ } } }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} } }} }} }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }}} }}}} }} }} }} }} }} }} }} }} } }} }} }} }} }} }} } }} }} }}} }} }} }} }} }} }} }} }} }} }} }} }} }}} }} }}}} } }} }} __ }} }} }} }} }} }} }} }}}} }} }} }}}} }} }} }} }} }} }}}} }} }}} }} }}}} }} }} }} }} }} }} }} }}} }} }}}} }} }} }} }}} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} } }} }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }}. } }} } }} }} }} }} }} }} }} }}}} }} }} }} }} }} }} }} } }} }}}}}} }} }} }} }} }} }} }}}} }} }} }} }} }}}} }} } }}}} }} }}}} }} }} } }} }} }} }} }} }} }} }} }} }}}} }} }} } }} } }} }} }} }} }} }} }} }} }}}}}} }} }} {{ }} } }}}} }} }} }} }} ) }} }} }} }} }}} }} }} }} }} }}} }}}} }} } }} }} }} }} }} }}}} }} }} }} }} }} }} }}}} }} }}) }} }} }} }}}} }}) }}
testing 1 2 3 4 5 6 7 8 9 0 }} } } }} }} }} }}}} }} } }}}} }} }} }} }}}} }} }}} }} }} }} }} }} } }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }} }}}} }} }} }} }} }} }}, } }} } }} }} }} }} } }} }} }} }} } }} }} }} }}}} }} }} }} } }} }} }} } }} }} }} }} }} } }} }} }} }} }} }} }}}} }} }} }} }} }} }} }} }} }}}} }}, }} }} }}) }} }} }} }} }}} }}} }}} }} }} } }} } }} }} }} }}} }}} }}}} }}}} }} }} }} }} }}} }} }}} }} }} }}}} }} }}} }} }} }} }} }} }} }} }} }} }}}} }} }} }} }} }} }} }} }} }}}} }}}} }}} }}}} }} }} }} }} }} }} }} }} }} }}}} }}}} }} }} }}}} }} }} }}} }}.}} logs . }} }}} }}} }} } }}}} }} } }} }}} }} }} }} }}} }} }} }} }} }}} }} }} }} }}} }} }}} }} }}}}} }}}} }} }} }} }} }}}}} }} }}}` } }} }} } }}} }} }} }} } }}}} }}} }} }} }} }} }} }} }} } }} }} }} }}}} }}}}}.” } }} }} }} }}}} }} }} }}}} }} }} }}} }} }} }} }} }} }}} }} }}}} }}}} }} }}} }} }} }}} }}} }} }} }} }} }} }} }} }} {{{ }}}} }}} }} }}}} }}}} }}
}}} }}} }} }}, { } } } }, { } } }}} }}{ }} }} }} }}} }} } } }}}} }}} }} } } } } } }} }} }} }} }} }}} }} }} }} }} }} }} }} }} }} }} }} }}} }}} }} }} } }} }} }} }} }}} }}}} }} } }}}}} }}} } }}} }}}} }} }} }} }}}} }}} }}}} }}}}}} }} }} }}}} }}}} }} }} }} }}}} }}}} }} }} }} }} }} }} }} }} }} }} }} }}} }}}} }} }}}} }}}} }}} }} }} }} }} }}}}} }}}} }} }}}}} }}} }}}} }}} }} }}} }} }}}} }}}} }} }}}}</ }}}} }}})] }} }}} }}}}}}}}}} } }} } }} }} }} } }} }} }} }} } }}}} }}} }}} }}}}} }} }} }} }}}} }}} }} }}}} }} }}{{{ }} }}} }} }} }} }} }} }}}} }} }} }} }} }}} }} }}} }}}</ } }} } }}} }} }}} }} }} } }}}} }}}} }}} }}} }}} }}}} }} }} }}}} }}}} }} }}}} }}} }} }}} }()}. .}} }}} }} }}} }}} }}} }}} }} }} }} }} }}} }}} }}} }}}} } }} }} }}} }}} }}}} }}}})}, }}} }}} }} }}} } }}}} }}}} }}}}}}}}}} } } }} }} }}} }}}}})]}. }}}} }}}} }} }}}} }})) }} }}} } }}}})}} }}}}} }} }} }}}} }} }}}}}}}} }}}}}}} }} }} }}})] }}}} }} } }} }} }} }})})] }} }}}}} }} }} }}} }}} }} }}}}} }})) } }}}} }} }}})}).i}} dutch}} } . } } }} } . } }} }} }}} }}}} }}}}) . } } }}} }} }} } } }}}}} }}}} } } }}} }}}} }}} }. } }}} }}}}}). } } }} }} }} }} }}}} } }} }} }}}. }}} }}} }})) }} }} }} }}}} }}} }}} }}} } }}}} } }} }} } }}} }} }}} }}}} }}. }}} }}} }}}} }} }} }}} }} }}}}}}. }}}} }}) }}}} }} }}}}} }}}}} }}} }}}} }}}}} }}})}}})} }}}}}} }} }}}}} }} ) . } }}}} }} }} }} } }}}}} } }}}}}} }}, }}}} }}). }} }} }} }} } }} }}}}}}) }}}} }}} } }}} }}}}}} }} . }}}}}} }}}} }}}} }} }}} }}}} }}}}}). }}}}}}} } }} }}}} }}) .}})) }}}} }}}. }}}}} }} }} }}}}). . }} }} }} }} }}}} }}}} }} }} }} } }} } }} }}}}))).} }}}} }}}))))). }})}}}})} }}}}. }}}}} }}. . } }}}}}} }}}}. }} }} }} }}}} }} }} }}} }}}}} }}. }})}}) }}}}. }}}}}} }}) }}}}} }}}} }}} }}}}}} }}}} }}))...}} }}} .}}}} }})) }}} ).. ))...}}}} . }{ }} }} }} }. }. } }}} }}} }} }} }. }}}}}} }})}..}}}}.. .. . . }. . .. 　}} }}...}...}}. }}} }.. }}}}}}) }}. . }}} }} .. ... }}} .}} . . }} }} .. }} }}} } }} }}. }}}} }}} }} }}}} }} . {{ .} . }}...}}. . ..........} .. }} . }} .. { .. .. . }} }}} } }} . }.. }} }}}}.... .. }} }}...}}.. .. .. }. }}}. }}} }} }} . }} . }} }} }}} }}} }}.. }}. }} }} . ........}}}} }}} ...} }} .. }}.... }}... }} .. }. . }}{{ }} }}}}. .}... . }}}}. . }} .. } }} .}}}}} .... }}. . . }} }}} . }} . . }} }.... .. .}}}. . }} {{ { } }} .. .. .. } }}} . }} . . }}... } . }} { }} { } }} }} . .{{ { }} }}... }} ....}}}}.. ... }} }} . ...}}} .}}. . . }}.. }}} . . }}. . }} . . }}. . }}. }} }} . ... ....}}. }} .... }}{ {} } }{ }}. ... }}. }}. }}} . }}} }}} }} . }}} }} }} #{ .. ............ }} . }}. ....}}... }} .... }} .. . . . . . . . }} }}}}} } }. }} loses make}} .... }} }. . }}} .]}, }}) }} }. }. . . . . .. .. }} . ) } }} . .. }}. . . }} }}...} }}} . }}} }}. }} }} . }} .... }} ... . }} . . . .}}}}}. }} . . .... . }} { ... . .. }.. }} } }}.. .. }}. . )}}. . .. . }. }} . .. }}... .. }}.. . }}}} .... }} }}}}}} }}}). }}.. }} '& .}} } } }} }} .. }} })... .. }}}} }} ... . }} .. }}... }) } }} . . . }} } }} }} {{ { }} }}}}... }}} }} . }}}.{ estd . }}}}. }} }}}} ...}} }} . .. .. .}}}} }} }} .. }} ..}} . . . }}...}} }}... }}. .} }} ..} ..... }}} .. . }}}} }} . }} . }} { }} }... .... }}.. }}.. . } }}} }}} }.}}... }}... }}.. . }} }} . ..}} }} }}}} }}.. əvvəl}}} } }}'.... }}. .. . .... }}} }}... . .}} .. .}} . }} . }} ... .. . }}}})..... . . .. ........ } }} الشهرовав يمكن . .}}...... ... } . .{{} }}>{ . . ... }}} . . }}}} .}} . .} . } ... .. . . ... }}; } }.. . . }} }; }}}} . ... .} . . }} .. }}. }} {{ }} .{ }. }} }} }} }} }} . } }} . . }} . }} . } .}}.. } .}} }}} }}} . }} . }} }} }} . }}. }} . .}) }} } }. }}. .} . }} }} }} }}}); transaction ###}}.. }}}} }}. }}}} . }}}} }}} }}} }.. . } }.{ ... {{}}}}.. . .... }} }}. }} ... .... }}} . }. . {{{ }}... . }} ... }}... }} . }} }}. }}} . . . .}} }} }} )} }}}}} }} , .}} . . }}}} }}} }} ... }. , }}} }}{..}} ). }}. }}... }} } }}... . .}} . }}}} . }} }}. }. .... ... }}}..... }}}} .... }}. . .. . }} }}. }} . . . }} .... }}}}.. . }}} ... }}}} ... . }}}.... }}. } . }}}}{ } }.. . }} }} . }}; }} }}} . }} . . }} } . . }}} . . . . }} - -}}}} }} ... . . } . {{}} }}}}}. . }} } . }}}}... ] }}}}}}} .. .}} }}} } . . . }}}' }} ․ '. . . .}} .. .. }}}}. }}}} }}. . }} . . ... . }}}
}}, }}
}} }}, } }} }} }} }
}} }}}} }
}}}} . , 전국이 되었습니다 ); nd로 시작되었습니다; .}}}, . }}... .. . . }}{{{ }} }}. ' }}}} }}} ... , 를 제공합니다 .
... } ; ..... ; }} }} , } }} .... }}} . 결의내용 }}}}.. 试看　b舅; 다가올 。 }} . }}}} }} }} }}}} }}} }} . }}}} . }} }} ٖ; 而不是从此. . . . . } } }}.... }} ... . }}}} }} }}. }} . }}} سوال }}} }}) . }}... }}... }} }} }}}} . }}。.notifyDataSetChanged . } .}} '}.
} }}.) }} .}} }}} ..... .} } }} }} }} } }} . المحلي ꡦ기 다 “.”; } // }} g}} ) }} }} }} }}.... .. }}}.. . }} .. }}} }} }}... }}. . .... .. '] . ... {.. .... }}axios { }} } }}. }} } ... }}}} - }}}. .. - ~ . .}}}} . .}} , }} }}. }} }}... - }} }}. }}... . ; }}} . }} }} wijzigingen}).

Implication

Analysis reveals a new information system evaluates web application security using OWASP ASVS standards, indicating improved accuracy with expert judgments.

Abstract

The design of an information system for assessing the security of web applications based on an original methodology developed by the authors is presented in this paper. The proposed security assessment methodology is based on the requirements of the OWASP Application Security Verification Standard (ASVS) and adapted to various application architectures and functionalities by selecting a set of relevant requirements and determining their impact on the overall evaluation. The quantitative assessment of requirements is calculated using a system of developed criteria and an evaluation algorithm that incorporates weight coefficients of importance assigned by experts. The assessment is carried out by multiple experts to minimize subjectivity in judgments. The aggregation of expert judgments is performed within a fuzzy logic subsystem. The article describes all stages of the assessment process automation – from collecting input data to calculating the integrated security score, taking into account the weight coefficients. The information system supports a modular architecture, personalized project workflows, and result visualization, enabling its application in information security audits.

Discussion

No takes yet. Share an insight, caveat, or question.

Cite This Study

Revniuk et al. (2025) studied this question.

synapsesocial.com/papers/68af5231ad7bf08b1eada5a1 https://doi.org/10.33108/visnyk_tntu2025.02.056

View Full Paper

Ask AI

Bookmark

Share

Development of an information system for the quantitative assessment of web application security based on the OWASP ASVS standard

Key Points

Implication

Abstract

Discussion

Cite This Study

Development of an information system for the quantitative assessment of web application security based on the OWASP ASVS standard

Key Points

Implication

Abstract

Discussion

Cite This Study

Keep reading

Keep reading