Proposta de uma técnica de apoio ao perito forense digital: vulnerabilidades web, suas métricas e sistema de scores

Abstract

The paper presented a framework of assistance in the construction of an expert report of vulnerabilities found in web systems failures. And this scenario is observed that along with the increasing demand and use of web systems have also increased vulnerabilities found in these applications. Currently there are already several tools and communities to effectively help the specialist digital expertise in building your reports, focused on the analysis of results of specific tools reviews, searching for vulnerabilities in web applications. This article helps digital expert to make assessment of vulnerability analysis tools to generate your expert report efficiently, saving time and effort. From the static analysis of source code the article presents a possibility to find the vulnerability of the web application. Specify the communities and CVE vulnerability databases, NVD and further defines what kind of vulnerability TOP 10 OWASP where it fits. It was also possible to see vectors and very detailed analysis in CVE Details, which was the tool that more was possible to aid digital forensics expert.