A case study on web application vulnerability scanning tools

This paper attempts to share about the tools that we used to perform vulnerability analysis within the organization. A study about background of tools that we had selected shall be elaborate in detail. As an experiment for the case study, we had performed vulnerability scanning that covered three different types of area; vulnerability scanning using different type of tools, vulnerability scanning using Nessus with different type of policy configuration and vulnerability scanning using Nessus with different time of executing the scanning. A detail description about the testing data, for example the project that we select and criteria for the scanning policy that we use will be explained. Result and finding from vulnerability scanning will be discussed in detail.