Security testing of crypto exchanges based on Owasp technology of Web Security Testing Guide
DOI: 10.31673/2409-7292.2023.020007
DOI:
https://doi.org/10.31673/2409-7292.2023.020007Abstract
The paper analyzed the security testing of crypto-exchanges, identified the inadequacy of checks in it, and found that the existing methodologies are insufficient to ensure the security of crypto-exchanges. The biggest attacks on crypto platforms, their causes, and how they could be avoided are explored. The essence of crypto-exchanges and their role in the modern world, the current state of security of crypto-exchanges, best practices and recommendations for improving the security of crypto-exchanges were developed. Based on research, a methodology for testing the security of crypto exchanges, developed on the basis of the OWASP Web Application Security Guide, is proposed.
Keywords: information system, cyber security, cryptocurrency, cryptocurrency exchange, security threats, theft, DDOS, Web application security, NFT, KYC, SQL, XSS, WAF.
References
1. Найбільша крадіжка криптовалювати в 2022 році [Електронний ресурс] – Режим доступу: https://www.moneycontrol.com/news/business/cryptocurrency/crypto-hackers-steal-3-billion-in-2022-set-tobe-biggest-year-for-digital-asset-heists-9347301.html
2. Project Spotlight: AI Security and Privacy Guide https://owasp.org/
3. Аналітичний ресурс дослідження захищеності криптобірж. [Електронний ресурс] – Режим доступу: https://cer.live
4. Інтернет платформа для розміщення Bug Bounty програм. [Електронний ресурс] – Режим доступу: https://hackenproof.com
5. Аналітичний ресурс для збору інформації про криптовалюти, та блокчейн платформи. [Електронний ресурс] – Режим доступу: https://coinmarketcap.com
6. [Електронний ресурс] – Режим доступу: http://www.cica.ca/research-and-guidance/documents/itadvisorycommittee/item12038.pdf
7. Топ 10 найпопулярніших вразливостей [Електронний ресурс] – Режим доступу: https://www.schell.com/Top_Ten_Database_Threads.pdf
8. KYC: поняття, процес і переваги. https://blog.whitebit.com/
9. Build engaging Web3 experiences for every user. https://www.fireblocks.com/web3-request-access/.
