ระบบทดสอบความปลอดภัยอัตโนมัติสำหรับเว็บแอพพลิเคชัน ภายใต้มาตรฐานโครงการความปลอดภัยสำหรับเว็บแอพพลิเคชันแบบเปิด

Abstract

The objective of this research is to develop a tools for security testing by use a web crawling robot (WebBot) that we designed and programmed.We use to lesson from WebGoat project to organization the test case and test plan but it also adds a new test case and test plan. WebGoat is deliberately insecure web application maintained by OWASP, for teach web application security lessons. The WebBot automatically executes test plan and stores test result for create reports and tracking problem in difference version of the test project or difference test case. The system using PHP and SQL were used as a development languages for creating the users interface and connect with database. The research results show that system can create the test plans to test data automatically. It can also to save the test resultsin the different caseso that tester can review and report vulnerability that is found.