Asia Pacific University Library catalogue

A project submitted in partial fulfillment of the requirements for the degree of BSc. (Hons) in Information Technology (UC3F1911IT).

Data breaches often known to be the biggest threat for those day-to-day internet users who often use vulnerable web applications or when it comes to deal with malicious emails. Vulnerable web application can be defined when a website is vulnerable to cyberattacks. Most commonly, cyberattacks in web application were exploited based on its web security vulnerabilities. Web security vulnerabilities are the security loopholes that can be found inside its web application. Security loopholes can be known as a weakness or misconfiguration in a website which allows intruder/attacker to gain access into webserver, database, or user’s computer.

The researcher found that most Asian countries including Malaysia compare with other regions are prone to cyberattacks such as data breaches. Hence, in this project, the researcher will highlight the most two severe web application vulnerabilities such as Cross Site Scripting and SQL injection. And will also develop a web penetration system for the Nscanner project for penetration tester/web developer to help them detecting web vulnerabilities in websites.

Apart from that, a social engineering defend mechanism also will be developed for the Nscanner system for email users to take precaution action to defend them against social engineering attack such as scams using machine learning technique. This is mainly to create awareness amongst Malaysian users who prone to data breach attacks.