International Journal of Cyber Security, Cloud & Engineering Research
type: channel
description: International Journal of Cyber Security, Cloud & Engineering Research Journal Particulars Details Journal Title International Journal of Cyber Security, Cloud & Engineering Research (IJCSCER) Publisher Wissira Research Lab LLC ISSN (Online) Request Pending Starting Year 2024 Publisher Address Carmel, Indiana, United States – 46074 Official Email editor@wissira.us Website https://ijcscer.org Language English Publication Format Online Access Model Open Access Main Subject Cyber Security Scope Cyber Security, Cloud Computing & Engineering Research Copyright Copyright remains with the Journal and/or Authors as specified in the publication agreement Peer Review Double-Blind Peer Review Publication Type International Scholarly Research Journal Journal Overview The International Journal of Cyber Security, Cloud & Engineering Research (IJCSCER) is an international peer-reviewed open-access journal dedicated to publishing innovative, high-quality, and impactful research in cybersecurity, cloud technologies, engineering sciences, and emerging digital systems. The journal provides a global platform for researchers, academicians, scientists, engineers, technology professionals, and industry experts to disseminate original research findings, technical advancements, and interdisciplinary studies. IJCSCER aims to foster scientific innovation and technological development by encouraging research that addresses contemporary challenges in secure computing, cloud infrastructures, intelligent systems, digital transformation, and advanced engineering applications. Focus Areas and Specializations Cyber Security Information Security Network Security Cyber Threat Intelligence Ethical Hacking Penetration Testing Digital Forensics Security Operations (SOC) Cyber Risk Management Zero Trust Security Security Governance Cloud Computing Cloud Architecture Cloud Security Multi-Cloud Environments Hybrid Cloud Systems Cloud-Native Applications Serverless Computing Container Technologies Kubernetes …
publisher: Wissira Research Lab LLC
language: en
publication name: International Journal of Cyber Security, Cloud & Engineering Research
items: Evolution of Secure Code Review Practices in Agile and DevOps Methodologies
items: API Security Testing in Microservices: Key Considerations for Developers
items: Evaluating the Impact of Security Certifications on Enterprise Application Vulnerability Trends
items: Privacy-Driven Security: Incorporating GDPR Principles in Application Security Testing
items: False Positive Elimination in SAST Tools: Techniques for Improved Accuracy
items: Securing Mission-Critical Applications in the Aviation Industry: Case Study and Best Practices
items: The Role of Governance, Risk, and Compliance Tools in Application Security Management
items: Comparative Analysis of OWASP Mobile Top 10 Mitigation Strategies
items: Real-Time Remediation Support: Automating Developer Assistance in CI/CD Pipelines
items: Designing Resilient Security Architectures for Legacy and Modern Applications
items: DevSecOps Maturity Models: Evaluating Implementation Effectiveness in Large Enterprises
items: The Role of AI in Predictive Threat Modeling for Enterprise Applications
items: Application Security for Serverless Architectures: Challenges and Solutions
items: Evaluating the Effectiveness of Static Analysis in Addressing SANS 25 Vulnerabilities
items: Zero Trust Architecture in Application Security: Principles and Implementation
items: Penetration Testing Automation: Accelerating Security Without Sacrificing Depth
items: OWASP Top-10 in 2024: Emerging Threats and Mitigation Strategies
items: Vulnerability Management Metrics: Measuring Success in Enterprise Security Programs
items: Interactive Application Security Testing (IAST): Bridging the Gap Between SAST and DAST
items: Securing Open Source Dependencies with Advanced Software Composition Analysis (SCA)
items: Compliance-Driven Security: Meeting PCI and HIPAA Standards in Agile Development Environments
items: Role of Threat Modeling in Preemptive Application Security Engineering
items: A Comparative Study of Open Source vs. Commercial Application Security Testing Tools
items: SAST and DAST Integration Strategies for Scalable CI/CD Workflows
items: Application Security Automation in Hybrid Cloud Architectures
items: Dynamic Vulnerability Scanning: Best Practices for Modern Web Applications
items: Enhancing DevSecOps Practices: Bridging Development and Security for CI/CD Pipelines
items: Cross-Industry Comparison: WMS Applications in Retail vs. Pharmaceuticals
items: Warehouse Sustainability Goals: The Role of Warehouse Management Systems (WMS) in Carbon Footprint Reduction
items: Impact of Regulatory Compliance on Global WMS Implementations

Evolution of Secure Code Review Practices in Agile and DevOps Methodologies
type: item
description: Secure code review has evolved significantly in response to the adoption of Agile and DevOps methodologies. These methodologies, characterized by rapid development cycles and continuous integration and deployment, demand equally agile security practices. This study examines how secure code review practices have transitioned from traditional, isolated approaches to integrated, continuous workflows. It analyzes the impact of automation tools, collaborative strategies, and cultural shifts on secure code reviews. Findings reveal that modern secure code review practices enhance security and productivity while addressing the unique challenges of fast-paced development environments. The paper concludes by highlighting the scope for further research in enhancing automation and developer engagement.
subject: Articles
  topic: section
subject: Secure code review
  topic: keywords
subject: Agile methodologies
  topic: keywords
subject: DevOps
  topic: keywords
subject: secure development lifecycle
  topic: keywords
subject: continuous integration
  topic: keywords
subject: static analysis
  topic: keywords
subject: automated security tools
  topic: keywords
subject: Author Name
  topic: keywords
subject: Scopus
  topic: keywords
subject: Springer
  topic: keywords
subject: Journal Name
  topic: keywords
subject: Wissira
  topic: keywords
subject: Journal Short Form
  topic: keywords
subject: Wissira Press
  topic: keywords
subject: Wissir Research Lab
  topic: keywords
subject: Research Gate
  topic: keywords
subject: SSRN
  topic: keywords
subject: ISSN
  topic: keywords
subject: Academia
  topic: keywords
subject: UGC Care
  topic: keywords
subject: PubMed
  topic: keywords
subject: WOS
  topic: keywords
creator: Hemalatha K
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-07-10
publication date: 2026-07-10
starting page: (29
ending page: 36)

API Security Testing in Microservices: Key Considerations for Developers
type: item
description: Microservices have transformed how software systems are developed, deployed, and managed, offering benefits such as modularity, scalability, and independent development of components. However, this architecture also presents unique security challenges due to the interconnected nature of services, predominantly through APIs. API security is paramount in protecting microservices ecosystems from threats like unauthorized access, data breaches, and denial-of-service attacks. This manuscript explores API security testing in microservices, highlighting critical considerations for developers. It examines common vulnerabilities, presents a comprehensive methodology for security testing, and discusses the results of adopting best practices. By focusing on proactive security measures and continuous testing, this paper provides actionable insights for ensuring robust API security in microservices.
subject: Articles
  topic: section
subject: API security
  topic: keywords
subject: microservices
  topic: keywords
subject: security testing
  topic: keywords
subject: vulnerabilities
  topic: keywords
subject: automated testing tools
  topic: keywords
subject: penetration testing
  topic: keywords
subject: best practices
  topic: keywords
subject: continuous integration
  topic: keywords
subject: Author Name
  topic: keywords
subject: Scopus
  topic: keywords
subject: Springer
  topic: keywords
subject: Journal Name
  topic: keywords
subject: Wissira
  topic: keywords
subject: Journal Short Form
  topic: keywords
subject: Wissira Press
  topic: keywords
subject: Wissira Research Lab
  topic: keywords
subject: Research Gate
  topic: keywords
subject: SSRN
  topic: keywords
subject: ISSN
  topic: keywords
subject: Academia
  topic: keywords
subject: UGC Care
  topic: keywords
subject: PubMed
  topic: keywords
subject: WOS
  topic: keywords
creator: Dr T. Aswini
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-07-08
publication date: 2026-07-08
starting page: (22
ending page: 28)

Evaluating the Impact of Security Certifications on Enterprise Application Vulnerability Trends
type: item
description: The rise of enterprise applications has revolutionized organizational operations but has also introduced significant cybersecurity risks. Security certifications, such as ISO 27001, SOC 2, and PCI DSS, are widely adopted as benchmarks for maintaining secure systems. This paper evaluates the impact of these certifications on reducing vulnerabilities in enterprise applications. By analyzing trends across certified and non-certified organizations and examining real-world case studies, the study provides an evidence-based assessment of certifications' effectiveness. Results reveal that while security certifications contribute to improved security hygiene, their implementation often falls short of addressing dynamic and advanced threats. The findings underscore the importance of integrating certifications with adaptive security practices for sustainable risk mitigation.
subject: Articles
  topic: section
subject: Security certifications
  topic: keywords
subject: enterprise applications
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: ISO 27001
  topic: keywords
subject: SOC 2
  topic: keywords
subject: vulnerabilities
  topic: keywords
subject: risk management
  topic: keywords
subject: compliance
  topic: keywords
subject: Author Name
  topic: keywords
subject: Scopus
  topic: keywords
subject: Springer
  topic: keywords
subject: Journal Name
  topic: keywords
subject: Wissirs
  topic: keywords
subject: Journal Short Form
  topic: keywords
subject: Wissira Press
  topic: keywords
subject: Wissira Research Lab
  topic: keywords
subject: Research Gate
  topic: keywords
subject: SSRN
  topic: keywords
subject: ISSN
  topic: keywords
subject: Academia
  topic: keywords
subject: UGC Care
  topic: keywords
subject: PubMed
  topic: keywords
subject: WOS
  topic: keywords
creator: Omar Farooq
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-07-06
publication date: 2026-07-06
starting page: (14
ending page: 21)

Privacy-Driven Security: Incorporating GDPR Principles in Application Security Testing
type: item
description: The General Data Protection Regulation (GDPR) has revolutionized how organizations approach data privacy and security. With applications increasingly processing sensitive personal data, ensuring compliance with GDPR while maintaining robust security has become a critical challenge. Application Security Testing (AST) offers a framework to identify and mitigate vulnerabilities in software systems. This manuscript examines the integration of GDPR principles, such as privacy-by-design, data minimization, and accountability, into AST methodologies. A systematic approach to embedding GDPR-aligned practices into AST is proposed, emphasizing practical implementations and measurable outcomes. Results indicate significant improvements in compliance, security posture, and user trust when GDPR principles are rigorously applied during security testing. The manuscript concludes with a discussion on the scope, limitations, and future implications of privacy-driven application security testing.
subject: Articles
  topic: section
subject: GDPR
  topic: keywords
subject: Application Security Testing
  topic: keywords
subject: Privacy-by-Design
  topic: keywords
subject: Data Protection
  topic: keywords
subject: Compliance
  topic: keywords
subject: Software Development Lifecycle
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Author Name
  topic: keywords
subject: Scopus
  topic: keywords
subject: Springer
  topic: keywords
subject: Journal Name
  topic: keywords
subject: Wissira
  topic: keywords
subject: Journal Short Form
  topic: keywords
subject: Wissira Press
  topic: keywords
subject: Wissira Research Lab
  topic: keywords
subject: Research Gate
  topic: keywords
subject: SSRN
  topic: keywords
subject: ISSN
  topic: keywords
subject: Academia
  topic: keywords
subject: UGC Care
  topic: keywords
subject: PubMed
  topic: keywords
subject: WOS
  topic: keywords
creator: Dr. Sandeep Kumar
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-07-05
publication date: 2026-07-05
starting page: (8
ending page: 13)

False Positive Elimination in SAST Tools: Techniques for Improved Accuracy
type: item
description: Static Application Security Testing (SAST) tools play a critical role in software security by identifying vulnerabilities in source code early in the development process. However, their utility is often hampered by the high rate of false positives—incorrect identification of secure code as vulnerable. False positives increase developer workload and erode trust in SAST tools. This manuscript explores the sources of false positives and presents state-of-the-art techniques for their elimination, including machine learning (ML), advanced static analysis techniques, and hybrid methodologies. Experimental results show that implementing these techniques can significantly reduce false positives without sacrificing detection accuracy, enabling more efficient and reliable software development workflows.
subject: Articles
  topic: section
subject: Static Application Security Testing
  topic: keywords
subject: SAST tools
  topic: keywords
subject: false positives
  topic: keywords
subject: machine learning
  topic: keywords
subject: hybrid techniques
  topic: keywords
subject: software security
  topic: keywords
subject: vulnerability detection
  topic: keywords
subject: Author name
  topic: keywords
subject: scopus
  topic: keywords
subject: springer
  topic: keywords
subject: Journal Name
  topic: keywords
subject: Wissira
  topic: keywords
subject: Journal Short Form
  topic: keywords
subject: Wissira Press
  topic: keywords
subject: Wissira Research Lab
  topic: keywords
subject: Research Press
  topic: keywords
subject: SSRN
  topic: keywords
subject: ISSN
  topic: keywords
subject: Academia
  topic: keywords
subject: UGC Care
  topic: keywords
subject: PubMed
  topic: keywords
subject: WOS
  topic: keywords
creator: Ma Xin
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-07-04
publication date: 2026-07-04
starting page: (1
ending page: 7)

Securing Mission-Critical Applications in the Aviation Industry: Case Study and Best Practices
type: item
description: Mission-critical applications in the aviation industry are fundamental to ensuring the safety, efficiency, and reliability of operations. With the increasing reliance on complex software systems and connected technologies, these applications are vulnerable to a wide array of cyber threats, ranging from insider attacks to sophisticated external breaches. This manuscript explores the challenges of securing mission-critical applications in aviation, providing a detailed case study of a recent security breach, followed by an analysis of best practices for strengthening these applications. Through examining existing literature, reviewing successful security strategies, and presenting a methodology for evaluating risk and securing systems, this paper offers a comprehensive approach to maintaining the integrity of aviation applications. The results of implementing recommended practices in a real-world scenario are discussed, showcasing the potential for minimizing risks and enhancing operational resilience.
subject: Articles
  topic: section
subject: Mission-Critical Applications
  topic: keywords
subject: Aviation Industry
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Best Practices
  topic: keywords
subject: Case Study
  topic: keywords
subject: Security Breaches
  topic: keywords
subject: System Resilience
  topic: keywords
creator: Dr. Jaspreet Khurana
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-04-18
publication date: 2026-04-18
starting page: (31
ending page: 37)

The Role of Governance, Risk, and Compliance Tools in Application Security Management
type: item
description: The escalating complexity of cybersecurity threats and regulatory requirements has driven organizations to adopt Governance, Risk, and Compliance (GRC) tools as integral components of application security management. GRC tools offer structured frameworks for managing security risks, ensuring regulatory compliance, and strengthening organizational governance. This manuscript explores the multifaceted role of GRC tools in enhancing application security, focusing on their integration with industry standards, risk mitigation strategies, and policy enforcement. Through an extensive review of existing literature and an analysis of real-world applications, this study illustrates the transformative impact of GRC tools. The findings highlight how organizations can leverage these tools to foster proactive risk management, streamline compliance processes, and improve overall application security resilience.
subject: Articles
  topic: section
subject: Governance
  topic: keywords
subject: Risk
  topic: keywords
subject: Compliance
  topic: keywords
subject: Application Security
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Risk Management
  topic: keywords
subject: Regulatory Compliance
  topic: keywords
subject: GRC Tools
  topic: keywords
creator: Yamini Arul
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-04-12
publication date: 2026-04-12
starting page: (24
ending page: 30)

Comparative Analysis of OWASP Mobile Top 10 Mitigation Strategies
type: item
description: Mobile applications dominate the digital landscape, facilitating diverse functionalities, but their vulnerabilities pose significant security risks. The Open Web Application Security Project (OWASP) Mobile Top 10 serves as a critical framework for identifying and mitigating these risks. This manuscript provides a comprehensive comparative analysis of mitigation strategies for the OWASP Mobile Top 10 vulnerabilities. Using an extensive review of existing literature, a structured methodology, and real-world case studies, this study evaluates the effectiveness, feasibility, and adoption barriers of these strategies. Results reveal that no single approach can address all vulnerabilities; rather, a combination of technological advancements, secure development practices, and organizational policies is necessary. This work aims to assist developers, organizations, and security practitioners in making informed decisions to strengthen mobile application security.
subject: Articles
  topic: section
subject: OWASP Mobile Top 10
  topic: keywords
subject: mobile app vulnerabilities
  topic: keywords
subject: security mitigation
  topic: keywords
subject: secure development
  topic: keywords
subject: cybersecurity
  topic: keywords
creator: Dr. Deependra Rastogi
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-04-12
publication date: 2026-04-12
starting page: (16
ending page: 23)

Real-Time Remediation Support: Automating Developer Assistance in CI/CD Pipelines
type: item
description: Continuous Integration and Continuous Deployment (CI/CD) pipelines are foundational to modern software development, enabling frequent and reliable code delivery. However, the complexity of these pipelines often introduces challenges, particularly when addressing errors and failures in real time. This study explores the development of a realtime remediation support system to assist developers in diagnosing and resolving issues within CI/CD workflows. By leveraging automation, machine learning models, and domainspecific knowledge bases, the proposed framework enhances error detection, categorization, and resolution. The results indicate significant reductions in mean time to resolution (MTTR) and improved developer efficiency. This manuscript outlines the problem, reviews existing literature, and details the methodology, results, and conclusions of the study.
subject: Articles
  topic: section
subject: CI/CD pipelines
  topic: keywords
subject: real-time remediation
  topic: keywords
subject: developer assistance
  topic: keywords
subject: automation
  topic: keywords
subject: error detection
  topic: keywords
subject: MTTR
  topic: keywords
subject: software development
  topic: keywords
creator: Yuki Tanaka
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-04-07
publication date: 2026-04-07
starting page: (9
ending page: 15)

Designing Resilient Security Architectures for Legacy and Modern Applications
type: item
description: In the digital era, organizations face an increasing challenge in securing both legacy and modern applications against evolving cyber threats. The complexity of managing legacy systems with outdated security measures alongside modern applications built on new technologies requires a strategic approach to ensure resilience, scalability, and comprehensive security. This manuscript explores the design of resilient security architectures for both legacy and modern applications. It examines the inherent security challenges in legacy systems, the unique security needs of modern applications, and provides a unified framework for addressing these challenges. A combination of traditional security measures and modern techniques such as cloudbased security solutions, microservices architecture, and zero-trust models are proposed to build a holistic and adaptable security framework. The findings highlight the importance of balancing security innovation with legacy system constraints, ensuring both operational continuity and robust protection against threats.
subject: Articles
  topic: section
subject: Resilient Security Architecture
  topic: keywords
subject: Legacy Systems
  topic: keywords
subject: Modern Applications
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Cloud Security
  topic: keywords
subject: Zero-Trust Architecture
  topic: keywords
subject: Microservices
  topic: keywords
subject: Security Framework
  topic: keywords
subject: Legacy Application Security
  topic: keywords
subject: Adaptive Security Solutions
  topic: keywords
creator: Dr Reeta Mishra
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-04-07
publication date: 2026-04-07
starting page: (1
ending page: 8)

DevSecOps Maturity Models: Evaluating Implementation Effectiveness in Large Enterprises
type: item
description: DevSecOps, the integration of security practices within the DevOps process, aims to bridge the gap between development, security, and operations teams. This paradigm shift is essential for improving software development cycles while enhancing security and compliance. However, large enterprises face distinct challenges in implementing DevSecOps due to the complexity of their infrastructure, processes, and organizational culture. This manuscript evaluates the effectiveness of DevSecOps maturity models in large enterprises, with a particular focus on their impact on security posture, operational efficiency, and overall organizational alignment. The study synthesizes findings from various case studies and academic research to propose a framework that assesses the maturity of DevSecOps practices and provides actionable insights into overcoming common challenges. This research contributes to the understanding of how large enterprises can achieve successful DevSecOps implementation and maturity.
subject: Articles
  topic: section
subject: DevSecOps
  topic: keywords
subject: maturity model
  topic: keywords
subject: security integration
  topic: keywords
subject: software delivery
  topic: keywords
subject: large enterprises
  topic: keywords
subject: effectiveness evaluation
  topic: keywords
subject: organizational alignment
  topic: keywords
creator: Nicole Berger
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-01-17
publication date: 2026-01-17
starting page: (24
ending page: 31)

The Role of AI in Predictive Threat Modeling for Enterprise Applications
type: item
description: Enterprise applications are essential for modern organizations but are increasingly exposed to sophisticated cyber threats. Predictive threat modeling (PTM), powered by Artificial Intelligence (AI), is emerging as a vital strategy to enhance security frameworks by identifying vulnerabilities before they can be exploited. This paper explores the integration of AI into PTM, discussing its methodologies, tools, benefits, and challenges. A detailed review of existing frameworks, case studies, and experimental results highlights how AI improves the precision and scalability of PTM systems. Finally, the paper concludes by emphasizing the transformative potential of AI in enterprise cybersecurity and suggesting pathways for future research and implementation.
subject: Articles
  topic: section
subject: Predictive threat modeling
  topic: keywords
subject: Artificial Intelligence
  topic: keywords
subject: enterprise security
  topic: keywords
subject: machine learning
  topic: keywords
subject: anomaly detection
  topic: keywords
subject: vulnerability analysis
  topic: keywords
subject: cybersecurity frameworks
  topic: keywords
creator: Dr. Neeraj Saxena
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-01-11
publication date: 2026-01-11
starting page: (17
ending page: 23)

Application Security for Serverless Architectures: Challenges and Solutions
type: item
description: The rise of serverless computing has transformed the way applications are developed and deployed, offering numerous advantages such as scalability, cost-efficiency, and reduced infrastructure management. However, serverless architectures introduce unique security challenges that need to be addressed to ensure robust and secure application environments. This paper explores the security challenges faced by organizations adopting serverless architectures, identifies potential vulnerabilities, and examines existing security solutions. We also present statistical analysis based on a survey conducted among cloud security professionals regarding their concerns and approaches to securing serverless applications. The paper concludes with recommendations for improving security practices in serverless environments.
subject: Articles
  topic: section
subject: Serverless computing
  topic: keywords
subject: application security
  topic: keywords
subject: cloud security
  topic: keywords
subject: security challenges
  topic: keywords
subject: cloud-native applications
  topic: keywords
subject: vulnerabilities
  topic: keywords
subject: serverless architecture
  topic: keywords
creator: Aisha Mohammed
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-01-11
publication date: 2026-01-11
starting page: (12
ending page: 16)

Evaluating the Effectiveness of Static Analysis in Addressing SANS 25 Vulnerabilities
type: item
description: The security of software systems is paramount in ensuring the protection of sensitive data and maintaining the integrity of applications. Static analysis, a widely used software vulnerability detection method, has proven to be effective in identifying and mitigating vulnerabilities. This research investigates the effectiveness of static analysis tools in addressing the security weaknesses outlined in the SANS 25 (Top 25 Most Dangerous Software Errors). Through a detailed methodology involving multiple static analysis tools, vulnerability scans, and case studies of software applications, this paper explores the strengths and limitations of static analysis in detecting critical vulnerabilities. A comprehensive statistical analysis is also provided to quantify the effectiveness of static analysis tools. The findings of this study contribute valuable insights into the integration of static analysis for improved software security practices.
subject: Articles
  topic: section
subject: Static Analysis
  topic: keywords
subject: SANS 25 Vulnerabilities
  topic: keywords
subject: Software Security
  topic: keywords
subject: Vulnerability Detection
  topic: keywords
subject: Software Development
  topic: keywords
subject: Security Testing
  topic: keywords
creator: Er. Niharika Singh
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-01-07
publication date: 2026-01-07
starting page: (6
ending page: 11)

Zero Trust Architecture in Application Security: Principles and Implementation
type: item
description: Zero Trust Architecture (ZTA) represents a paradigm shift in network security, emphasizing a model that no one, whether inside or outside the organization, is trusted by default. This paper explores the principles, implementation strategies, and benefits of applying Zero Trust in application security. The adoption of Zero Trust requires a comprehensive understanding of its foundational concepts, technology requirements, and real-world implementation in application security. The research discusses the integration of authentication, authorization, and continuous monitoring to protect sensitive applications and data. Case studies and examples are provided to highlight how Zero Trust can be successfully implemented and the challenges faced during this process. The paper concludes by discussing the future prospects of Zero Trust Architecture in the evolving landscape of cybersecurity.
subject: Articles
  topic: section
subject: Zero Trust Architecture
  topic: keywords
subject: Application Security
  topic: keywords
subject: Network Security
  topic: keywords
subject: Authentication
  topic: keywords
subject: Authorization
  topic: keywords
subject: Continuous Monitoring
  topic: keywords
subject: Cybersecurity
  topic: keywords
creator: Adrian Ionescu
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2026-01-07
publication date: 2026-01-07
starting page: (1
ending page: 5)

Penetration Testing Automation: Accelerating Security Without Sacrificing Depth
type: item
description: Penetration testing (pen testing) is a critical activity within cybersecurity aimed at evaluating the security posture of a system, network, or application by simulating real-world cyberattacks. However, manual penetration testing can be time-consuming and may not scale effectively, particularly in environments that demand frequent testing. Automation in penetration testing has emerged as a promising solution, offering increased efficiency and broader coverage without sacrificing depth. This manuscript explores the evolution of penetration testing, the advantages and challenges of automation, and presents a detailed methodology for achieving effective automated pen testing. The study also includes a statistical analysis that evaluates the efficiency, effectiveness, and accuracy of automated penetration testing tools in comparison to traditional manual approaches. The findings suggest that while automation accelerates penetration testing, it requires careful integration with human expertise to ensure comprehensive coverage.
subject: Articles
  topic: section
subject: Penetration testing
  topic: keywords
subject: automation
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: security tools
  topic: keywords
subject: statistical analysis
  topic: keywords
subject: manual testing
  topic: keywords
subject: attack simulations
  topic: keywords
subject: vulnerability assessment
  topic: keywords
creator: Swati Joshi
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-10-20
publication date: 2025-10-20
starting page: (23
ending page: 28)

OWASP Top-10 in 2024: Emerging Threats and Mitigation Strategies
type: item
description: The Open Web Application Security Project (OWASP) is a globally recognized authority in identifying and addressing the top security threats facing web applications. As the digital landscape evolves, so do the security challenges. The OWASP Top-10 list, updated annually, serves as a benchmark for developers and organizations to prioritize cybersecurity risks and formulate strategies to mitigate them. The 2024 edition introduces emerging threats driven by technological advancements, evolving attack methodologies, and more sophisticated adversaries. This manuscript examines the OWASP Top-10 for 2024, with a focus on the latest threats, their potential impact, and effective mitigation strategies that organizations can employ to secure their web applications. It also explores how these risks are shaped by modern trends like AI, cloud computing, and the growing complexity of web ecosystems.
subject: Articles
  topic: section
subject: OWASP Top-10
  topic: keywords
subject: web security
  topic: keywords
subject: emerging threats
  topic: keywords
subject: cybersecurity
  topic: keywords
subject: mitigation strategies
  topic: keywords
subject: 2024
  topic: keywords
subject: web applications
  topic: keywords
subject: risk management
  topic: keywords
subject: cloud security
  topic: keywords
subject: attack vectors
  topic: keywords
creator: Shalu Jain
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-10-18
publication date: 2025-10-18
starting page: (17
ending page: 22)

Vulnerability Management Metrics: Measuring Success in Enterprise Security Programs
type: item
description: Vulnerability management is a critical aspect of enterprise security programs, serving as a foundation for preventing, identifying, and mitigating potential threats to organizational assets. This paper explores various vulnerability management metrics employed by enterprises to gauge the success and effectiveness of their security programs. A structured analysis is conducted to determine which metrics provide the most accurate reflection of security posture and organizational risk. The study presents key findings related to how organizations utilize these metrics to inform decision-making and prioritize resources in an ever-evolving threat landscape. Ultimately, this work highlights the role of vulnerability management metrics in shaping a proactive security environment, offering recommendations for future research and implementation strategies.
subject: Articles
  topic: section
subject: Vulnerability Management
  topic: keywords
subject: Enterprise Security
  topic: keywords
subject: Metrics
  topic: keywords
subject: Risk Assessment
  topic: keywords
subject: Cybersecurity Posture
  topic: keywords
subject: Threat Landscape
  topic: keywords
subject: Risk Management
  topic: keywords
creator: Rajesh Patel
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-10-18
publication date: 2025-10-18
starting page: (12
ending page: 16)

Interactive Application Security Testing (IAST): Bridging the Gap Between SAST and DAST
type: item
description: With the increasing threats in the digital landscape, securing software applications is a critical requirement for organizations. Traditional security testing methods such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) have been used for identifying vulnerabilities in applications, but they each have their limitations. Interactive Application Security Testing (IAST) is a new approach that combines the strengths of both SAST and DAST, providing real-time insights into vulnerabilities during runtime without the need for a full application scan. This manuscript explores IAST as a bridge between SAST and DAST, addressing their individual shortcomings while enhancing the accuracy and speed of application security testing. We analyze the methodology, implementation, statistical analysis, results, and the future potential of IAST in the realm of software security.
subject: Articles
  topic: section
subject: IAST
  topic: keywords
subject: SAST
  topic: keywords
subject: DAST
  topic: keywords
subject: application security
  topic: keywords
subject: vulnerability detection
  topic: keywords
subject: software testing
  topic: keywords
subject: real-time analysis
  topic: keywords
subject: security automation
  topic: keywords
creator: Er. Aman Shrivastav
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-10-15
publication date: 2025-10-15
starting page: (7
ending page: 11)

Securing Open Source Dependencies with Advanced Software Composition Analysis (SCA)
type: item
description: Open-source software (OSS) has become a cornerstone of modern development, offering both flexibility and cost-efficiency. However, the widespread use of open-source dependencies introduces significant security risks, particularly vulnerabilities inherited from third-party libraries. Software Composition Analysis (SCA) has emerged as a critical tool for identifying, managing, and securing these dependencies. This paper explores advanced techniques in SCA, emphasizing the importance of proactive risk mitigation, real-time vulnerability scanning, and the implementation of secure development practices. The integration of machine learning and automated patch management in SCA tools offers promising improvements in safeguarding applications. The research evaluates current methodologies and proposes a framework for enhanced security through intelligent dependency management and continuous monitoring.
subject: Articles
  topic: section
subject: Open Source Software
  topic: keywords
subject: Software Composition Analysis
  topic: keywords
subject: Dependency Management
  topic: keywords
subject: Security Vulnerabilities
  topic: keywords
subject: Machine Learning
  topic: keywords
subject: Risk Mitigation
  topic: keywords
subject: Automated Patch Management
  topic: keywords
creator: Ma Xin
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-10-15
publication date: 2025-10-15
starting page: (1
ending page: 6)

Compliance-Driven Security: Meeting PCI and HIPAA Standards in Agile Development Environments
type: item
description: In the face of evolving cybersecurity threats and increasing regulatory requirements, businesses handling sensitive information must integrate compliance standards like Payment Card Industry (PCI) and Health Insurance Portability and Accountability Act (HIPAA) into their development practices. Agile development methodologies, known for their flexibility and speed, often pose challenges in meeting the stringent compliance requirements set by these regulations. This paper explores the challenges, methodologies, and strategies used to ensure that Agile development processes meet PCI and HIPAA standards while maintaining security. A statistical analysis of the relationship between compliance integration and development efficiency is presented, alongside a comprehensive methodology for achieving compliance without compromising on Agile principles. The study concludes by highlighting key practices for businesses to follow and outlining potential future developments in this area.
subject: Articles
  topic: section
subject: PCI Compliance
  topic: keywords
subject: HIPAA Compliance
  topic: keywords
subject: Agile Development
  topic: keywords
subject: Security
  topic: keywords
subject: Regulatory Standards
  topic: keywords
subject: Compliance-Driven Security
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Development Methodologies
  topic: keywords
creator: Satyam Agarwal
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-07-22
publication date: 2025-07-22
starting page: (21
ending page: 25)

Role of Threat Modeling in Preemptive Application Security Engineering
type: item
description: Threat modeling plays a pivotal role in enhancing the security posture of applications by identifying potential security threats before they materialize. In a world where cyberattacks are becoming increasingly sophisticated and frequent, preemptive application security engineering is essential for safeguarding sensitive data, maintaining system integrity, and ensuring the safety of users. This paper explores the importance of threat modeling as a proactive approach in the application security lifecycle, analyzing the different methodologies, tools, and best practices used in the identification, assessment, and mitigation of risks. By emphasizing the integration of threat modeling into the development process, this paper highlights its impact on reducing vulnerabilities and improving overall application security.
subject: Articles
  topic: section
subject: Threat Modeling
  topic: keywords
subject: Application Security
  topic: keywords
subject: Preemptive Security Engineering
  topic: keywords
subject: Vulnerability Mitigation
  topic: keywords
subject: Risk Assessment
  topic: keywords
subject: Cybersecurity
  topic: keywords
subject: Security Threats
  topic: keywords
subject: Security Lifecycle
  topic: keywords
subject: Risk Management
  topic: keywords
creator: Meera Iyer
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-07-20
publication date: 2025-07-20
starting page: (16
ending page: 20)

A Comparative Study of Open Source vs. Commercial Application Security Testing Tools
type: item
description: Application Security Testing (AST) is critical in identifying and mitigating vulnerabilities within software applications. With the growing concerns over data breaches and cyber-attacks, there is an increasing demand for robust application security solutions. This paper explores and compares the efficacy of Open Source and Commercial Application Security Testing Tools. We analyze these tools based on criteria such as functionality, cost, ease of integration, and accuracy in vulnerability detection. The study evaluates various tools in each category and presents a comparative analysis to help organizations choose the appropriate solution based on their requirements and resources. This paper concludes with insights into the advantages and disadvantages of both types of tools, emphasizing that the choice of tool depends on specific organizational needs, security requirements, and budget constraints.
subject: Articles
  topic: section
subject: Application Security Testing
  topic: keywords
subject: Open Source
  topic: keywords
subject: Commercial Tools
  topic: keywords
subject: Vulnerability Detection
  topic: keywords
subject: Cost Analysis
  topic: keywords
subject: Security Solutions
  topic: keywords
creator: Narendra Nagar
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-07-20
publication date: 2025-07-20
starting page: (11
ending page: 15)

SAST and DAST Integration Strategies for Scalable CI/CD Workflows
type: item
description: As the demand for faster and more secure software development increases, integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into Continuous Integration/Continuous Deployment (CI/CD) workflows has become crucial. These tools help ensure the security of applications by identifying vulnerabilities early in the software development lifecycle (SDLC). However, integrating SAST and DAST effectively into CI/CD processes presents several challenges, including performance overhead, false positives, and the scalability of security testing in large, complex environments. This paper explores integration strategies for SAST and DAST that maximize security, speed, and scalability within CI/CD workflows. By evaluating existing solutions, proposing a hybrid strategy, and testing with a case study, we provide valuable insights into optimizing security testing in automated environments.
subject: Articles
  topic: section
subject: SAST
  topic: keywords
subject: DAST
  topic: keywords
subject: CI/CD
  topic: keywords
subject: Security
  topic: keywords
subject: Software Development
  topic: keywords
subject: Integration
  topic: keywords
subject: Vulnerability Detection
  topic: keywords
subject: Automation
  topic: keywords
creator: Ravi Sharma
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-07-17
publication date: 2025-07-17
starting page: (6
ending page: 10)

Application Security Automation in Hybrid Cloud Architectures
type: item
description: The integration of hybrid cloud architectures in modern enterprise systems has brought a host of advantages such as scalability, flexibility, and cost optimization. However, these benefits come with significant security risks that necessitate robust measures for protection against evolving cyber threats. Application security automation is becoming an essential approach to address security challenges in hybrid cloud environments. This manuscript explores the role of automation in securing applications within hybrid cloud systems, examining current trends, challenges, and solutions. It delves into various tools and strategies for automating security tasks such as vulnerability scanning, threat detection, and incident response. By leveraging automation, organizations can ensure that security policies are consistently applied across both on-premise and cloud-based infrastructure, significantly reducing the risk of security breaches. This paper discusses methodologies for implementing automated security systems in hybrid clouds and presents the outcomes of real-world implementations, highlighting the improvements in efficiency, security posture, and compliance.
subject: Articles
  topic: section
subject: Hybrid Cloud
  topic: keywords
subject: Application Security
  topic: keywords
subject: Automation
  topic: keywords
subject: Vulnerability Scanning
  topic: keywords
subject: Threat Detection
  topic: keywords
subject: Incident Response
  topic: keywords
subject: Cloud Security
  topic: keywords
subject: Cybersecurity Automation.
  topic: keywords
creator: Er. Lucky Jha
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-07-17
publication date: 2025-07-17
starting page: (1
ending page: 5)

Dynamic Vulnerability Scanning: Best Practices for Modern Web Applications
type: item
description: Dynamic vulnerability scanning is an essential process for identifying potential security threats in modern web applications. This method scans web applications while they are running, identifying vulnerabilities that could be exploited by attackers. As web applications become more complex, with dynamic user interactions and ever-evolving technologies, it is imperative to utilize best practices for effective vulnerability scanning. This research highlights the significance of dynamic vulnerability scanning, the common threats it mitigates, and the latest techniques and tools available for organizations to secure their web applications. Key findings suggest that regular and comprehensive scanning, along with automated tools and manual validation, can significantly reduce security risks.
subject: Articles
  topic: section
subject: Dynamic vulnerability scanning
  topic: keywords
subject: web applications
  topic: keywords
subject: security threats
  topic: keywords
subject: automated tools
  topic: keywords
subject: manual validation
  topic: keywords
subject: best practices
  topic: keywords
subject: penetration testing
  topic: keywords
subject: vulnerability management
  topic: keywords
creator: Raghav Jindal
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-04-20
publication date: 2025-04-20
starting page: (31
ending page: 35)

Enhancing DevSecOps Practices: Bridging Development and Security for CI/CD Pipelines
type: item
description: The increasing adoption of DevOps practices in software development has made Continuous Integration (CI) and Continuous Deployment (CD) pipelines indispensable for modern software engineering. However, security is often an afterthought in such practices, leading to vulnerabilities that are exploited in production environments. This paper explores the integration of security into the CI/CD pipelines, a practice known as DevSecOps. By introducing security early in the development lifecycle, DevSecOps ensures a proactive security posture without compromising the speed and efficiency of development cycles. We present a comprehensive analysis of DevSecOps principles, challenges, and best practices. Furthermore, we explore the current methodologies and frameworks being employed to effectively bridge the gap between development and security. Finally, we propose improvements and strategies to enhance the current DevSecOps practices, including statistical analysis on the impact of DevSecOps adoption on software security and development timelines.
subject: Articles
  topic: section
subject: DevSecOps
  topic: keywords
subject: CI/CD pipelines
  topic: keywords
subject: software security
  topic: keywords
subject: continuous integration
  topic: keywords
subject: continuous deployment
  topic: keywords
subject: security automation
  topic: keywords
subject: vulnerability management
  topic: keywords
creator: Er. Kratika Jain
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-04-18
publication date: 2025-04-18
starting page: (26
ending page: 30)

Cross-Industry Comparison: WMS Applications in Retail vs. Pharmaceuticals
type: item
description: Warehouse Management Systems (WMS) are critical tools for optimizing inventory management, enhancing operational efficiency, and ensuring accuracy in both retail and pharmaceutical industries. The primary purpose of this manuscript is to compare the applications of WMS in the retail and pharmaceutical sectors, analyzing how each industry utilizes WMS differently due to their unique operational, regulatory, and logistical needs. The study highlights key features of WMS, the role of technology in inventory management, and the challenges faced in both industries. Using both qualitative and quantitative methodologies, the paper provides a comprehensive analysis of WMS adoption, implementation, and outcomes. Key findings demonstrate that while both sectors benefit from WMS, the pharmaceutical industry’s need for strict regulatory compliance and batch traceability leads to a more specialized approach compared to retail. The research concludes with recommendations for optimizing WMS applications tailored to the specific needs of each industry.
subject: Articles
  topic: section
subject: Warehouse Management Systems
  topic: keywords
subject: Retail
  topic: keywords
subject: Pharmaceuticals
  topic: keywords
subject: Inventory Management
  topic: keywords
subject: Supply Chain Optimization
  topic: keywords
subject: Regulatory Compliance
  topic: keywords
subject: Technology Integration
  topic: keywords
subject: Operational Efficiency
  topic: keywords
creator: Neha Reddy
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-04-15
publication date: 2025-04-15
starting page: (18
ending page: 25)

Warehouse Sustainability Goals: The Role of Warehouse Management Systems (WMS) in Carbon Footprint Reduction
type: item
description: The growing global emphasis on sustainability has driven industries to adopt innovative technologies for reducing their environmental impact. Among the various sectors contributing to carbon emissions, warehouses play a significant role due to their energyintensive operations. Warehouse Management Systems (WMS) are pivotal in streamlining logistics and operations, improving efficiency, and enabling warehouses to contribute to sustainability goals. This paper investigates how WMS can facilitate the reduction of the carbon footprint in warehouse operations through optimization of energy usage, transportation, inventory management, and waste reduction. By examining current trends, practices, and case studies, the research demonstrates the potential of WMS in achieving warehouse sustainability goals. The findings reveal that integrating advanced WMS technologies significantly reduces energy consumption, carbon emissions, and waste while enhancing overall operational efficiency.
subject: Articles
  topic: section
subject: Warehouse Management System (WMS)
  topic: keywords
subject: sustainability
  topic: keywords
subject: carbon footprint reduction
  topic: keywords
subject: energy efficiency
  topic: keywords
subject: logistics
  topic: keywords
subject: warehouse operations
  topic: keywords
subject: , environmental impact
  topic: keywords
subject: inventory management
  topic: keywords
subject: transportation optimization
  topic: keywords
creator: Prof. (Dr) Punit Goel
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-04-12
publication date: 2025-04-12
starting page: (10
ending page: 17)

Impact of Regulatory Compliance on Global WMS Implementations
type: item
description: The implementation of Warehouse Management Systems (WMS) has revolutionized supply chain operations worldwide. However, the regulatory environment in different regions poses both challenges and opportunities for the successful deployment and ongoing operation of WMS. This paper explores the impact of regulatory compliance on global WMS implementations, focusing on the unique compliance requirements in various countries and industries. The study highlights the strategies that businesses can adopt to ensure regulatory compliance while optimizing WMS performance. The research identifies the key factors influencing WMS implementation success, such as legal frameworks, data privacy laws, trade compliance, and environmental regulations. The findings of this study underscore the need for businesses to integrate regulatory compliance into the early stages of WMS design and deployment to minimize operational disruptions and mitigate risks.
subject: Articles
  topic: section
subject: Warehouse Management Systems
  topic: keywords
subject: Regulatory Compliance
  topic: keywords
subject: Global Supply Chains
  topic: keywords
subject: Legal Framework
  topic: keywords
subject: Data Privacy
  topic: keywords
subject: Trade Compliance
  topic: keywords
subject: Implementation Challenges
  topic: keywords
subject: Supply Chain Optimization
  topic: keywords
creator: Maya Raj
rights: Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
date: 2025-04-12
publication date: 2025-04-12
starting page: (1
ending page: 9)