ASC (Web Application Security Control)

View Demo · Documentation · User Guide · Open API Specification · C4 Container Diagram ·

📔 Table of Contents

• About the Project
  • Tech Stack
  • Features
• Getting Started
  • Prerequisites
  • Run Locally
  • Deployment
• Contributing

🌟 About the Project

Project requirements:

Using Web Application Exploits or a similar public dataset regarding the exploits on Web application vulnerabilities, build a "smart" DDS (Data Distribution Service) publish/subscribe system able to offer real-time alerts about new security issues for a specific class of software like CMS, frameworks, modules, shopping cart managers, etc. Also, study WebSub (W3C Specification). Additionally, the system will provide – via a SPARQL endpoint – various solutions (advice, technical reports, defensive programming guidelines and others) to prevent and/or eradicate such security incidents. This information will be available in multiple formats: HTML + RDFa, JSON-LD using Software Application and/or SoftwareSourceCode schema.org concepts. Bonus: including a "smart" Web proxy able to efficiently cache requested data.

👾 Tech Stack

WebSub

• Python Flask WebSub

Data Ingestion

• Python

Database

• Apache Jena Fuseki

DevOps

• Docker

🎯 Features

• Receving near real-time alerts regarding the exploits on Web application vulnerabilities
• Exposing a SPARQL endpoint

🧰 Getting Started

‼️ Prerequisites

Install the necessary tools for the project:

1. Python (required)
2. Apache Jena Fuseki (required)
3. Redis (required)
4. Docker (required)

🏃 Run Locally

Clone the project

  git https://github.com/andreiplugaru/WADE-ASC.git

Go to the DataIngestion directory

  cd WADE-ASC\DataIngestion

Install dependencies

    pip install -r requirements.txt

Start the DataIngestion service

    python .\WADE-ASC\DataIngestion\main.py --init

Go to the WebSub directory

  cd WADE-ASC\WebSub

Install dependencies

    pip install -r requirements.txt

Start the Redis

  docker run -p 6379:6379 redis:alpine

Start the Celery worker

  celery -A src.publisher.publisher_hub:celery worker -l info -P solo

Start the PublisherHub service

  python -m src.publisher.publisher_hub

Start a Subscriber service

 python -m src.subscriber --port 8081

🚩 Deployment

To deploy this project run

  docker compose up -d --build

👋 Contributing