Веб-сканер: средство обнаружения уязвимостей для сканирования веб-сайта по его URL-адресу

Аннотация

Information constitutes a very important asset for people or organiza- tions, therefore, protecting it has become a priority for everyone, unfortunately there is not a unique formula that grantees a complete and total protection to the information. With that in mind, it becomes necessary the use of a software that provides help and facilitates work for the cybersecurity specialists so they can provide the best possi- ble protection of data. Objective: Develop a system that can scan a given URL link of a website, and provide all the necessary information about the site. Methods: From a scientific point of view, the scientific observation, document analysis, survey and in- terview are considered as methods, giving place to a susceptible proposal to the scien- tific verification and validation. Results: The implementation of a website that contains a vulnerability detection system (web scanner), which can scan a website given its URL. Conclusions: the implementation of the said system for the security of the information in the University of Sancti Spíritus «José Martí Pérez» (UNISS) is valued as a positive support for the security against phishing attacks, in a single repository. Keywords: cybersecurity, information, malware, phishing attacks, social engi- neering, tool, vulnerability analysis, web scanner ВЕБ-СКАНЕР: СРЕДСТВО ОБНАРУЖЕНИЯ УЯЗВИМОСТЕЙ ДЛЯ СКАНИРОВАНИЯ ВЕБ-САЙТА ПО ЕГО URL-АДРЕСУ Аннотация. Информация представляет собой очень важный актив для людей или организаций, поэтому ее защита стала приоритетной задачей для всех, но, к сожалению, не существует уникальной формулы, обеспечивающей полную и абсолютную защиту информации. В связи с этим возникает необходимость в использовании программного обеспечения, которое помогает и облегчает работу специалистов по кибербезопасности, чтобы они могли обеспечить наилучшую защиту данных. Целью исследования стала разработка системы, способной сканировать заданную URL-ссылку сайта и предоставлять всю необходимую информацию о нем. С научной точки зрения в качестве методов рассматриваются научное наблюдение, анализ документов, анкетирование и интервьюирование, уступающие место восприимчивому предложению, подлежащему научной проверке и обоснованию. В результате был создан веб-сайт, содержащий систему 6 Digital technologies and law обнаружения уязвимостей (веб-сканер), которая может сканировать веб-сайт по его URL-адресу. Внедрение указанной системы для защиты информации в Университете Санкти-Спиритус «Хосе Марти Перес» оценивается как эффективная поддержка защиты от фишинговых атак в едином хранилище. Ключевые слова: кибербезопасность, информация, вредоносное ПО, фишинговые атаки, социальная инженерия, инструмент, анализ уязвимостей, веб-сканер Introduction. Cybersecurity is one of the leading niches of information technol- ogy. It refers to the tools, frameworks, techniques, and practices implemented to ensure the security of computing, information, and other systems and their users. Cybersecurity covers the broad range of technical, organizational and governance issues that must be considered to protect networked information systems against acci- dental and deliberate threats. It goes well beyond the details of encryption, firewalls, anti-virus software, and similar technical security tools. This breadth is captured in the widely used International Telecommunication Union (ITU) definition [7]. The importance of cybersecurity has increased as so many government, business, and day-to-day activities around the world have moved online. But especially in emerg- ing economies, “[m]any organizations digitizing their activities lack organizational, technological, human resources and other fundamental ingredients needed to secure their system, which is the key for the long-term success [2, 7]. With the dawn of the World Wide Web, installing antivirus software was necessary to protect your computer from attacks. Even though destructive assaults back then were not as well known, as they are today, the history of cyber security threats has kept pace with the advancement in information technology. Since computers were connected to the internet and began exchanging messages, cybercrime has substantially changed. Even if the amount of risk is substantially higher now than it was back then, computer users have been understandably concerned about these threats for a long time. Despite the fact that the Internet has positively affected people’s lives, there are negative issues emerged related to the use of Internet. Cases like cyber-bully; online fraud, racial abuse, pornography and gambling had increased tremendously due to the lack of awareness and self-mechanism among Internet users to protect themselves from being victims to these acts. However, past research revealed that the level of awareness among Internet users is still low or moderate. One of the vital measures to be taken is to cultivate knowledge and awareness among Internet users from their early age, i.e., young child