diplomsko delo
Žan Kopač (Author), Damjan Vavpotič (Mentor)

Abstract

Pričujoče diplomsko delo predstavlja pregled orodij za varnostno testiranje spletnih aplikacij, ki jih lahko integriramo v okolje DevOps. Vključuje podrobnejši opis ter primerjavo orodij OWASP ZAP, Wapiti in Arachni. Izbrani so primerni kriteriji za medsebojno primerjavo ter izpostavljene izstopajoče prednosti in slabosti posameznega orodja. V delu je predstavljeno okolje DevOps ter različni načini, kako lahko v njem izvajamo varnostno testiranje. Opisan je tudi primer postavljenega cevovoda CI/CD z dinamičnimi varnostnimi testi za spletno aplikacijo. Namen dela je bralcu predstaviti nekaj popularnih orodij za dinamično varnostno testiranje, ki jih je mogoče vključiti v cikel DevOps. Poleg tega s primerjavo prednosti in slabosti orodij olajša izbiro, katero uporabiti v posamezni situaciji.

Keywords

varnost;DevOps;testiranje;DAST;univerzitetni študij;diplomske naloge;

Data

Language: Slovenian
Year of publishing:
Typology: 2.11 - Undergraduate Thesis
Organization: UL FRI - Faculty of Computer and Information Science
Publisher: [Ž. Kopač]
UDC: 004(043.2)
COBISS: 120542211 Link will open in a new window
Views: 20
Downloads: 8
Average score: 0 (0 votes)
Metadata: JSON JSON-RDF JSON-LD TURTLE N-TRIPLES XML RDFA MICRODATA DC-XML DC-RDF RDF

Other data

Secondary language: English
Secondary title: An overview of security testing tools in the DevOps environment
Secondary abstract: This thesis presents an overview of web application security testing tools that can be integrated into the DevOps cycle. It includes a detailed description and the comparison of the tools OWASP ZAP, Wapiti and Arachni. Appropriate criteria are chosen for comparison and distinguishable pros and cons of each tool are presented. The thesis presents the DevOps environment and multiple ways of including security testing. An example of a working CI/CD pipeline with dynamic security tests of a web application is described. The purpose of this thesis is to present the reader some of the popular dynamic security testing tools that can be integrated in to the DevOps cycle. Additionally, it eases the choice of tools in different situations by juxtaposing the pros and cons of each tool.
Secondary keywords: security;DevOps;testing;DAST;computer science;diploma;Računalništvo;Univerzitetna in visokošolska dela;
Type (COBISS): Bachelor thesis/paper
Study programme: 1000468
Embargo end date (OpenAIRE): 1970-01-01
Thesis comment: Univ. v Ljubljani, Fak. za računalništvo in informatiko
Pages: 61 str.
ID: 16327068