Securing Web Applications : Practical Strategies for Enhancing Security in React with Rails Web Application

Abstract

In today’s digital world, web applications are fundamental to daily interactions and business operations. However, their widespread use exposes them to various security risks and vulnerabil- ities. This thesis is dedicated to exploring those vulnerabilities and the depths of web application security, focusing on three main goals: identifying appropriate security testing tools, starting a budget-friendly and result-driven security improvement process, and managing security vulnera- bilities systematically. The thesis aims to guide in selecting security testing tools and demonstrates practical ways to conduct security tests. By considering factors like effectiveness and limited resources, the research proposes a methodical approach to tool selection and security risk management. The study also provides an end-to-end process using the proposed solutions, showcasing how they help in quickly obtaining and analyzing security test results. The focus is on demonstrating vulnerability management to address security issues promptly, which is aimed to be repurposed in software products of similar nature and maturity. Eventually, this study tackles challenges in web application security process improvement. By outlining a structured approach to tool selection and test execution, along with efficient vulnerability management, it contributes to enhancing overall security. The research also suggests areas for refining the solution to adapt to evolving security needs in web application development.