Defender-Attacker Model Based Secure Software Development Lifecycle for Common Web Vulnerabilities

Abstract

In this paper, we propose a novel secure software development life cycle (SSDLC) algorithm for web applications by observing and demonstrating the 3 most popular web vulnerabilities from both the attacker's and defender's roles. This algorithm is based on the defender-attacker model and aims to provide confidentiality in data.