<?xml version="1.0" encoding="UTF-8"?> <article key="pdf/17355" mdate="2013-10-06 00:00:00"> <author>Ayush Chugh and Gaurav Gupta</author> <title>Web Application Security, Attacks and Mitigation</title> <pages>671 - 675</pages> <year>2013</year> <volume>7</volume> <number>5</number> <journal>International Journal of Computer and Information Engineering</journal> <ee>https://publications.waset.org/pdf/17355</ee> <url>https://publications.waset.org/vol/77</url> <publisher>World Academy of Science, Engineering and Technology</publisher> <abstract>Today&amp;amp;rsquo;s technology is heavily dependent on web applications. Web applications are being accepted by users at a very rapid pace. These have made our work efficient. These include webmail, online retail sale, online gaming, wikis, departure and arrival of trains and flights and list is very long. These are developed in different languages like PHP, Python, C, ASP.NET and many more by using scripts such as HTML and JavaScript. Attackers develop tools and techniques to exploit web applications and legitimate websites. This has led to rise of web application security; which can be broadly classified into Declarative Security and Program Security. The most common attacks on the applications are by SQL Injection and XSS which give access to unauthorized users who totally damage or destroy the system. This paper presents a detailed literature description and analysis on Web Application Security, examples of attacks and steps to mitigate the vulnerabilities. </abstract> <index>Open Science Index 77, 2013</index> </article>