Automated Web Application Security Vulnerability and Injection Detection Combining Static Code Analysis and Asynchronous Tracking

An automated detector of web application security vulnerabilities and injection that combines static code analysis with asynchronous tracking.

An automated detector of web application security vulnerabilities and injection that combines static code analysis with asynchronous tracking. As a reference project it shows how a system like this is put together in practice, which parts matter and how they are tested, so that a developer can learn from it and build on it.

It suits learners who want practical security experience: understanding the threat, building the defence or detector, testing it against realistic attacks and reporting the results.

The main parts are a realistic threat model, the detection or protection mechanism itself, testing against sample attacks, and reporting and alerting of findings. The reference build uses Python, scikit-learn, Wireshark, and OpenSSL, with a clear project structure, setup instructions and sample data so that it can be run and extended.