Development of a Methodology for the Implementation of Secure Web Applications In Business Organizations

Abstract

Background: Web application development is a difficult and complex task. The complexity is mostly expressed in the multitude of tasks that must be performed in the development life cycle. In today's environment, it is important that web applications prove their security and resilience in a changing cyber environment. For these reasons, web applications should meet a number of requirements in the process of their technological implementation, which is explored in the article. Methods: The methods used are related to a literature survey on the cyber security requirements of web applications and the characteristics of their life cycle. On this basis, basic key issues of vulnerability testing of developed systems in business organizations have also been studied. Results: As a result of the development of the methodology its main components have been tested in the development of web applications. The achieved application protection levels as a result of the implemented measures have been reported and analyzed. On this basis, some possibilities for improvement of the proposed methodological components are outlined. Conclusions: As a result of the studies and analyses basic conclusions have been drawn about the possibilities for developing and implementing secure web applications in business organizations.