Исследование угроз и методов обеспечения безопасности Web-приложений при несанкционированных проникновениях

Abstract

Abstract. This article examines common security threats to web applications and presents a practical approach to assessing resilience against unauthorized access. The methodology follows a structured workflow including passive reconnaissance (OSINT), service inventory, resource enumeration, baseline configuration auditing, and manual verification of key observations through HTTP(S) traffic analysis. The results highlight that web application security cannot be achieved by a single control; instead, it requires a layered set of measures such as secure configuration, robust access control, secure development practices, and continuous assessment. The paper also emphasizes the value of evidence-based artifacts (scan outputs and reporting materials) to ensure repeatability and to evaluate the effectiveness of remediation actions.