UTSA @2021
IS 4463 – Final Report
(100 points maximum)
The OWASP Top XXXXXXXXXXlist is now available! Review the updates to the list before proceeding with
this report. You will be writing a five- to eight-page report on a topic related to web application
security with a focus in one of these two areas:
1. A Recent Web Application Vulnerability
Find a recent vulnerability related to one of these vulnerabilities as detailed in the OWASP
Top XXXXXXXXXX :
• A01:2021: Broken Access Control
• A02:2021: Cryptographic Failures
• A04:2021: Insecure Design
• A08:2021: Software and Data Integrity Failures
• A10:2021: Server-Side Request Forgery (SSRF)
Report on your chosen vulnerability using OWASP as a framework along with your own
esearch. In addition to the OWASP links below, you should include at least three other
citations of reputable sources.
Provide an overview of the type of vulnerability, typical attack vectors, prevalence, detectability,
impact, and mitigation strategies. Then discuss an event related to this vulnerability in detail,
with a summary of expert analysis conducted thus far.
2. A Security Testing Tool in Web Application Security
Review a security testing tool that is frequently used in web application security environments.
You will need to explain how to download and use the tool, and describe its features with a
sample scenario. Below are two lists of common tools.
• OWASP Testing Tools
• Top 10 Open Source Security Testing Tools for Web Applications (hackr.io)
Your report should be single-spaced, in 12-font size. Include headings to delineate major sections,
and code analysis and screenshots where relevant.
Grades will be based on the thoroughness and clarity of your report, the quality and depth of your
sources, and your own insights and observations.
Please submit your document in PDF format with the filenaming convention
lastname_ID_4463_report.pdf (where ID is your abc123 UTSA ID).
https:
owasp.org/Top10
https:
owasp.org/Top10
https:
owasp.org/Top10
https:
owasp.org/www-project-web-security-testing-guide/stable/6-Appendix/A-Testing_Tools_Resource
https:
hackr.io
log/top-10-open-source-security-testing-tools-for-web-applications