Organizing Classification of Application Logic Attacks in Component-based E-Commerce Systems
Faisal Nabi1, Jianming Yong2, Xiaohui Tao2, Muhammad Farhan3 & Nauman Naseem3 Show affiliations
- University of Southern Queensland, Australia
- USQ, Australia
- MIT, Australia
Journal of Computer Science, Volume 17, Issue 11, pp. 1046–1058 · doi.org/10.3844/jcssp.2021.1046.1058
Abstract
This research paper addresses the topic of application logic attack taxonomy that is due to unclear and incorrect implementation in component-based applications. The issue addresses the detection and classification of two separate types of vulnerabilities in component-based applications. The paper completes this aim through organising the classification of each attack and then proposes the classification of logical vulnerabilities and discusses the two distinct forms of weakness and coding faults in the application software found in the mid-level of the framework. The most important argument is to desegregate awareness of attack patterns with boundary profile status relevant to an application logic vulnerability and possible threats. Having review of two different types of attack taxonomies, a logical vulnerability classification based taxonomy is proposed.
Licence and reuse
Open access. This article is licensed under a Creative Commons Attribution 4.0 International Licence (CC BY 4.0), as printed on the article, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original authors and the source. No permission is needed.
How to reuse this articleResponses (0)
About this article
Nabi, F., Yong, J., Tao, X., Farhan, M. & Naseem, N. (2021). Organizing Classification of Application Logic Attacks in Component-based E-Commerce Systems. Journal of Computer Science, 17(11), 1046–1058. https://doi.org/10.3844/jcssp.2021.1046.1058
- Licence
- CC BY 4.0
- Issue
- Volume 17, Issue 11
- Policies
- Editorial independenceUse of generative AIData availabilityAppeals and complaints
- Version
- Version of record
