Web Application Vulnerability

Web application are one of the most important platforms for required information and services delivery over Internet in this era. In this paper, we are using a set of hybrid (static +dynamic) code analysis approach that characterize input sanitization code and input validation code for patterns and are expected to indicators of web application vulnerabilities. Static and dynamic techniques are used to extract in the proposed system in an accurate result and also increases the capacity of system to handle the huge amount of data. In the broad adoption of web services, Security has become most important factor. The number of reported web application vulnerabilities is increasing dramatically. The web application vulnerability scanners are probe web applications for security vulnerabilities. Current security relies on server-side mechanisms of web server are important, common distributed systems. Web software engineers need support in identifying vulnerable code due to limited time and resources. A practical approach to predicting vulnerable code would enable them to prioritize security auditing efforts. Web applications are important, common distributed systems whose current security relies on server-side. Most Web applications aim to enforce simple, intuitive security policies, such as, for Web-based email, disallowing any scripts in untrusted email messages.