{'fraction_non_alphanumeric': 0.017704918032786884, 'fraction_numerical': 0.0, 'mean_word_length': 5.438818565400844, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Securing PHP Based Web Application Using Vulnerability Injection

In the past few years, Vulnerability injection technique has been given relatively lesser attention by the research community. The probable reason might be positioned in its objective which is apparently contrary to the purpose of making applications more secure. However, the same technique can be used in various research applications such as the automatic creation of vulnerable code for the purpose of educational application, systems requiring in-depth testing and evaluation of both vulnerability scanners and security teams. In the contemporary literature, a handful of work exists for securing PHP based web applications using vulnerability injection. Most of the protocols exploit the vulnerability detection rather than vulnerability injection which is a major drawback for the design of realtime and secure applications. Moreover, the existing protocols employ single type of vulnerability which limits its practical usage. Also, the dynamic nature of PHP makes the design of secure PHP based applications more challenging. In the light of above said limitations, we propose to design a prototype which targets PHP based web applications. Further, the prototype is injected with taintstyle vulnerabilities i.e., Sql injection, cross-site scripting etc. The thesis would exploit vulnerabilities present in the latest versions of well known PHP applications. This, in turn, would provide a better insight into the most common type of vulnerabilities.